Blog
Practical AI governance intelligence for compliance professionals.
What Does a Completed EU AI Act FRIA Actually Look Like?
The EU AI Office hasn't published its FRIA template, and the Digital Omnibus moved the high-risk deadline to December 2027. Here's a completed Fundamental Rights Impact Assessment for an AI resume screener — section by section.
DPIA for AI Systems: When It's Required, What It Must Cover, and How Most Organizations Get It Wrong
78% of organizations now use AI, but most haven't conducted the DPIA that GDPR Article 35 requires. Here's what a compliant assessment actually looks like.
ISO 42001: The 503 Obligations Your Largest Customer Is About to Require
ISO 42001 certification is showing up in RFPs. Here are the 503 obligations it contains and why voluntary just became mandatory.
Your AI System Is Already Regulated — You Just Haven't Mapped the Overlaps
GDPR, EU AI Act, and DORA overlap across 1,570 obligations. Most organizations manage them in separate spreadsheets. That's the gap.
Colorado's AI Act Was Repealed Before It Took Effect
Colorado repealed SB 24-205 before its effective date and replaced it with SB 26-189, effective 1 January 2027. Here's what survives from the original 24 obligations, what doesn't, and how to tell the difference.
EU AI Act Article 9: The 23 Obligations Nobody Summarizes
Article 9 says 'implement a risk management system.' It actually contains 23 specific obligations. Here's every one.
The Auditability Gap — And Why We Built For It From Day One
87.8% of financial institutions lack a defined AI strategy. The Auditability Gap explains why — and what closing it requires.
78 Bills, 27 States, One Problem: Who's Tracking Your Chatbot Obligations?
Oregon and California passed chatbot safety laws with conflicting obligations. 78 bills across 27 states demand obligation-level tracking, not headline compliance.
Compliant Is Not Defensible — Why Your AI Decisions Need Reasoning Chains
Compliance is a checklist. Defensibility requires structured reasoning chains. Learn why regulators, auditors, and insurers now demand documented AI decision logic.
What AI Compliance Actually Requires — The Definitive List
2,993 current obligations across 16 regulations. The complete list of what AI compliance actually requires — obligation by obligation, regulation by regulation.