Method

Evidence over opinion.

Every finding in a CompliAct dossier cites the article, the instrument, and the evidence. Here's how we build one.

Three principles.

Every control traces to a specific article of a specific instrument. If we can't cite it, we don't claim it.

Documentation your team can actually follow — not a 90-page memo nobody implements.

Structured so your counsel can clear it in hours, not weeks.

EU AI Act
Provider/deployer classification, transparency, high-risk obligations, GPAI duties
NIST AI RMF 1.0
Govern, map, measure, manage functions
ISO/IEC 42001
AI management system alignment
Quebec Law 25
Automated-decision notification, privacy impact assessments
Colorado AI Act
Risk management, impact assessments, disclosures
PIPEDA + OPC guidance
Meaningful consent, automated decision-making guidance

Instrument	What we assess
EU AI Act	Provider/deployer classification, transparency, high-risk obligations, GPAI duties
NIST AI RMF 1.0	Govern, map, measure, manage functions
ISO/IEC 42001	AI management system alignment
Quebec Law 25	Automated-decision notification, privacy impact assessments
Colorado AI Act	Risk management, impact assessments, disclosures
PIPEDA + OPC guidance	Meaningful consent, automated decision-making guidance

Contents

Every dossier ships with an evidence index — so a buyer or auditor can verify, not just trust.

Five questions, three minutes — and you'll know your exposure under the EU AI Act, and what to do about it.