AI Governance · EU AI Act · ISO 42001 · NIST AI RMF
Audit your AI
before the regulator does
EU AI Act risk classification, ISO/IEC 42001 management system, NIST AI Risk Management Framework. AI-system register, model-card retention, dataset lineage, post-market monitoring, incident reporting — operating on the same audit-execution cascade as your other domains.
AI-system register
- Risk classification (Unacceptable / High / Limited / Minimal)
- Use-case linkage to business objectives
- Provider vs deployer vs distributor distinctions
- GPAI / foundation-model dependency tracker
Technical documentation
- Model card retention with version history
- Dataset lineage + bias evaluation evidence
- Conformity assessment workflow
- Quality management system (Art. 17) controls
Post-market monitoring
- AI-incident reporting (Art. 73) workflow
- Drift detection + retraining triggers
- Human-oversight log retention
- Ongoing fundamental-rights impact assessment
Crosswalk to other frameworks
- EU AI Act ↔ ISO 42001 mapping
- NIST AI RMF crosswalk
- GDPR Article 22 automated-decision overlap
- DORA AI / ICT operational resilience overlap
Be EU AI Act ready before August 2026
AI Governance module on Business + GRC Enterprise tiers. Seed the AI-system register today.