What's new?
We are launching four new control frameworks for the AI Compliance solution.
The purpose is to make it easier for you to comply with the AI Act depending on what best matches your organization’s situation.
Why this update?
The AI Act introduces different requirements depending on how an organization uses AI. Having one single set of tasks made it difficult for users to focus only on what was relevant to them.
That’s why we are now introducing four dedicated control frameworks.
With these new frameworks, you get more precise tasks, better visibility, and the ability to work even more efficiently with the compliance requirements of the AI Act.
This gives you the ability to:
✔ Only work with the tasks that actually apply to you
✔ Get a clear overview of your progress
✔ Comply with the regulation whether your organization develops/provides or uses AI systems
How to get started
Go to Controls → Open framework → Activate.
Then choose the framework that fits your situation as described below.
|
Framework |
Chose framework when |
Aprox. tasks per framework |
AI Act – High-risk deployer obligations |
You use AI systems in your organization that are classified as high-risk under the AI Act |
48 tasks |
AI Act – Deployer obligations |
You use AI systems in your organization |
22 tasks |
AI Act – Provider obligations |
You develop and provide AI systems |
21 tasks |
AI Act – High-risk provider obligations |
You develop and provide AI systems that are classified as high-risk under the AI Act |
48 tasks |
Tip:
-
Always start by selecting the framework that determines whether you are a provider or a deployer of AI.
A deployer is an organization that uses AI systems internally, and providers develops or provides AI systems within the EU. -
If you later classify your AI usage or development as high-risk, you will automatically receive a task prompting you to activate one of the two high-risk frameworks
If you are already working with AI Compliance
If you are already completing AI compliance tasks in the platform and you activate one of the four frameworks, it will not affect the work you have already done.
For example:
If you have already completed a task related to setting up a data processing agreement for an IT system, that task will remain completed after activating one of the new frameworks.
