One workspace for the AI governance lifecycle.
From registering an AI system and completing its context, through planning risks and controls, verifying approved controls with evidence, final sign-off, and ongoing monitoring - all in one place.
The main story: how a system moves through governance.
AI Systems and Context
Register each AI system and complete its structured context. Context must be finalised before any planning item can be created or edited.
Governance Planning
Draft system risks, compliance gaps, controls, control-to-risk and clause-to-control links, and exceptions or deferrals. Planning items begin as drafts.
Governance Review
The submitted package is frozen. The assigned reviewer can approve, approve with conditions, request changes, or reject. Requested changes return items to draft.
Control Verification
Only approved controls are implemented here. Move controls through their lifecycle, define named evidence requirements, upload or link evidence, and resolve readiness blockers.
Operational Readiness
Submit readiness to an assigned approver. Readiness checks cover approved control status, required evidence, pending deferrals, and approval conditions.
Monitoring
After sign-off the system is in ongoing monitoring. A user can request reassessment when context, obligations, or control assurance changes.
Reassessment
Reassessment routes the system back to the phase that needs attention - context, planning, or verification. Only one reassessment is open at a time.
Library Templates
Regulation, risk, control, policy, and use-case items in the platform library are templates. Importing a template creates an independent, organisation-owned copy.
Prepare governance work faster while keeping decisions with your team.
AI can help prepare drafts and surface relevant information. Authorised people make the governance decisions.
Drafting assistance
AI drafts risks and suggests controls based on the system's recorded context. Every draft is reviewed and confirmed by an assigned person.
Audit history queries
Ask questions about recorded audit history in plain language and get a direct answer from the actual data, where enabled in the deployment.
Regional context assistance
Where enabled, the assistant surfaces the regulations that typically apply based on where a system is deployed. Applicability decisions remain with the team.
A maintained regulation library. Reviewed on a schedule. Updated when rules change.
Coverage spans the EU, UK, US, India, Singapore, and ASEAN regions. Each regulation in the library has a summary, mapped obligations, and links to control templates. Three examples below - the full library, with regional filters, lives on the Regulations page.
Risk tiers, human oversight, and technical documentation obligations for high-risk AI on the EU market.
International standard for AI management systems. Annex A controls are available in the template library.
Consent, retention, and breach-notification obligations for AI systems processing Indian personal data.
The library grows with each content update. When a change is confirmed, the affected template is updated so teams can review its impact on their imported copy.