AI compliance readiness
Current requirements. Practical implementation.
We help turn applicable requirements into data controls, evaluation evidence and documented operating decisions, working with your legal, privacy and security owners.
Official sources reviewed 11 October 2026. Requirements depend on your role, use case and jurisdiction.
Law · Phased obligations
EU AI Act
We help prepare AI inventories, provider/deployer role mapping, transparency controls and evaluation evidence. Article 50 applies from 2 August 2026, with a limited transition for some existing systems. Revised high-risk dates are 2 December 2027 for Annex III and 2 August 2028 for Annex I; applicability must be checked per system.
Law · Personal data and decisions
GDPR & UK data protection
For AI using personal data, we support data-flow mapping, impact-assessment inputs, retention controls and safeguards around automated decisions. UK work considers the Data (Use and Access) Act 2025 changes now in force, with legal bases and individual-rights requirements reviewed by the organisation's privacy owners.
Rights · Provenance and permissions
Copyright, IP & model licensing
We document source provenance, model licences, permitted data use and output-review checkpoints for legal review. The UK government published its copyright-and-AI report and impact assessment in March 2026. We track that work without treating consultation options as settled permissions to use copyrighted material.
Standards and guidance · Voluntary references
ISO & NIST governance frameworks
ISO/IEC 42001, ISO/IEC 42005 and the NIST AI Risk Management Framework provide useful references for AI management, impact assessment and generative-AI risk. We use them to structure ownership, risk records, evaluations and review processes. Framework use is distinct from independent certification.
Our scope is technical readiness and implementation support. Legal opinions and independent certification remain with the relevant specialists; private hosting alone does not establish compliance.