Regulatory readiness
Am I ready for the AI rulebook?
How the control plane maps to the obligations that matter.
Data governance & PII
CoveredPII guardrail detects and redacts sensitive data pre processing.
Art. 10 · MEASURE 2.10 · A.7.2 / A.7.4
Human oversight
CoveredEscalation routes high risk actions to a review queue with SLAs.
Art. 14 · MANAGE 2.3 · A.9.2
Robustness & security
CoveredPrompt injection guardrail + tamper evident audit chain.
Art. 15 · MEASURE 2.7 · A.6.2.6
Bias & fairness
CoveredProtected class guardrail blocks discriminatory decisions.
Annex III(4) · MEASURE 2.11 · A.7.3
Record keeping & logging
CoveredSHA-256 hash chained audit log, verifiable on demand.
Art. 12 / 19 · MANAGE 4.3 · A.6.2.8
Risk management
CoveredUse case risk scoring + tiering drives required controls.
Art. 9 · MAP 1.1 · A.5.2
Transparency & disclosure
PartialDisclaimers + citation checks; end user notices still manual.
Art. 13 · MEASURE 2.9 · A.8.2
Post market monitoring
PartialEval Lab + runtime metrics; continuous drift monitoring is roadmap.
Art. 72 · MANAGE 4.1 · A.6.2.8
Mapping is illustrative and scoped to this reference implementation, not a legal compliance determination.