By Sara Zambrano
MAIA: Artificial Intelligence to Protect Those Who Defend Rights
In Latin America and the Caribbean, civil society organizations face an increasingly complex landscape. Repression no longer occurs only in the streets or in courtrooms; it also unfolds in digital spaces. Mass surveillance, targeted cyberattacks, disinformation campaigns, gender-based digital violence, communication infiltration, and online criminalization are now part of the daily reality for human rights and land defenders, social organizations, unions, community media outlets, and many other individuals and groups at risk.
In response to this context, MAIA emerges: AI-Powered Threat Modeling, a tool designed from and for civil society organizations in Latin America and the Caribbean. MAIA is not just a technological innovation; it is a political and ethical commitment to building safer, more sovereign, and more just digital territories.
Social organizations face complex digital threats, yet they often lack the technical, financial, and human resources to manage them effectively. Although robust methodologies such as threat modeling are widely used in the fields of digital and operational security, their implementation requires specialized knowledge and intensive manual work.
Threat modeling involves identifying valuable assets (information, communications, identities), potential adversaries, types of attacks, probabilities, and impacts. It is a rigorous and effective process for prioritizing risks and making strategic decisions. However, in practice, it is often inaccessible to organizations with limited budgets or those facing urgent risk situations.This creates a critical gap: the tools exist, but they are out of reach for those who need them most.
MAIA was created to close that gap.
The project proposes developing a specialized Small Language Model (SLM) for threat modeling, capable of reducing between 90% and 95% of the manual work required in these processes. This means tasks that previously took hours or even days can be completed in a fraction of the time, allowing organizations to respond more quickly in high-risk contexts.
But MAIA is not simply “AI applied to digital security.” Its design is grounded in three fundamental principles:
1. Technological Sovereignty and Data Protection
The information handled by civil society organizations is highly sensitive. Using commercial platforms that process data on servers located outside the region and under foreign jurisdictions entails unacceptable risks.For this reason, MAIA is built on:
* Open-source language models
* Fully local deployment
* Infrastructure hosted within Latin American territory
* End-to-end encrypted communications
* Architectures that prevent external access to information