Compliance

Match each requirement to the exact evidence in this record, then close what is missing.

EU AI Act and SOC 2 Type II are complete. The rest turn on 3 actions, and one is already overdue — arm the adverse-decision rule.

26 of 31 answered

Regimes
What this means
A compliance platform builds a figure from what you have — an integration read your config, somebody attested, a policy was uploaded. Every figure here is built from what your agents did: a satisfied row that cannot be followed to an event is a row this page will not draw. Rules in monitor mode are watching, not satisfied.

counts are obligations answered from the chain, not documents uploaded

Regime	Record coverage	Next step
ISO/IEC 42001AI management system	6 / 9overdue	Each system has defined operating limits, and something enforces them.67%
EU AI ActEurope · Articles 12, 14 and 50	5 / 5complete

What closes the 5

3 actions

Arm the adverse-decision rule.

ISO/IEC 42001 A.8.3 · DPDPA 2023 §8(4) · overdue

Arm

Set daily spend ceilings for 5 agents.

ISO/IEC 42001 A.6.2.4 · 0 of 5 agents bounded

Set

Instrument the agents that stopped reporting.

ISO/IEC 42001 A.6.2.7 · ISO/IEC 27001:2022 A.8.16 · 1 of 5 agents have gone quiet

Connect

Not answered by activity logs

Obligations no runtime log can evidence — an impact assessment written before anything ran, a board-approved policy, the competence of your operators. Listed and never counted as met; that is what keeps the other figures honest.

An impact assessment exists before a system is deployed
The organisation has an AI policy, approved at the top
The people operating these systems are competent for the job
A risk management system runs across the whole lifecycle
Somebody signs off on the period before it closes
Information-security policies are defined and approved
No agent acts on a child's data without verifiable parental consent
Consent was obtained, and can be withdrawn as easily as it was given

What closes the 5

Not answered by activity logsⓘ

Not answered by activity logs