Running an AI Act compliance program: the checklist, an AI system inventory, readiness assessment, an AI governance policy and the documents each role must keep, with the dates that drive the plan.
A step-by-step AI Act checklist: inventory and classify, rule out prohibited practices, AI literacy, transparency duties, provider steps for high-risk systems, deployer steps, general-purpose model duties, and the dates each step must be done by.
Building the AI inventory that every AI Act program starts from: what counts as an AI system, recording role, intended purpose and risk tier for each, documenting not-high-risk decisions, and using NIST AI RMF and ISO 42001 practice for inventories.
How to assess readiness for the AI Act: role and classification review, gaps against the high-risk requirements, documentation, logging and oversight, QMS, deployer duties, what is already in force, and the standards and guidance available to measure against.
What an AI governance policy should settle for AI Act compliance: accountability and roles, classification and approval of new AI uses, AI literacy, acceptable use of generative AI, documentation, and how it aligns with ISO 42001 and the provider's QMS.
Which documents each AI Act role must produce and how long to keep them: technical documentation, QMS records and declarations for providers, logs, impact assessments and worker notices for deployers, and model documentation and training summaries for model providers.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.