How It Works

Define System

Name the AI system, describe what it does, and classify its EU AI Act risk tier. Each field explains why it matters.

Outcome: System record with ID, risk class, and accountable owner.
Component Inventory

Answer 32 guided questions across six domains — models, data, vendors, infrastructure, controls, monitoring — with regulatory context on each question.

Outcome: Structured evidence across all six domains.
Gap Analysis

Gaps generate automatically from your answers — severity, cited article or standard, residual risk, and what evidence closes each one.

Outcome: Regulatory-cited gap register by severity.
Assess & Assign

Assign an owner, remediation approach, and target date to each gap so findings become an action plan that flows into every report.

Outcome: Action plan with named owners and dates.
Evidence Package

Generate five HTML reports from one record — Board, Technical, Legal/DPO, CISO, and Procurement — each written for its audience.

Outcome: Five shareable stakeholder reports.

Who runs the review

Built for cross-functional teams — each role gets a report written for them.

Both products run in your browser. No account required. SBOM files and review answers stay on your device.

Need a walkthrough? Request a demo