AI governance
Compliance with the EU AI Act, Regulation (EU) 2024/1689
Regulation (EU) 2024/1689 binds every deployer of AI systems, not only whoever built them. The first thing an inspection asks for is the inventory: which systems are in use, at what risk classification, and who answers for each — including the AI your staff brought in on their own.
Screens from DSA Compliance v6.2 in a demo environment. All data shown is fictitious.
What the rule requires, and in which article
For information only, not legal advice. Always check against the consolidated text in force.
Up to €35,000,000 or 7% of worldwide annual turnover for the prohibited practices in art. 5; up to €15,000,000 or 3% for breaching other obligations (art. 99).
The badges identify the obligation the program digitises. They are not certifications or conformity accreditations.
What gets handed over when somebody asks
- An inventory of AI systems with risk classification and a named owner
- An individual record of art. 4 training, per person and content version
- A signed, in-date fundamental rights impact assessment
- A record of human oversight in critical uses
- A history of incidents and of how they were reported
This programme implements certifiable ISO standards. If your organisation already is, here you see which part is solved and which laws it covers in each country where you operate.
What we get asked about AI governance
Yes. The Regulation distinguishes provider from deployer, and the deployer has obligations of its own: AI literacy, human oversight and informing the people affected.
They are the AI systems staff use without declaring them. They can't be classified or supervised, and if one causes an incident the liability still sits with the organisation.
Prohibited practices and AI literacy have applied since February 2025; the general obligations and the penalty regime since August 2026.
A 30-minute guided demo on the real platform, or a one-hour assessment session with a consultant.
