Policy and compliance

Start with the framework your organization has determined applies to the application. Use these guides to connect its requirements to controls and recorded evidence.

Keep three questions separate: what the requirement asks, what the rule checks, and what the record demonstrates. A framework label does not answer all three.

These guides support control design and evidence collection. They do not replace legal advice, certification, or an independent assessment.

Choose a framework

Review saved assessments of four Article 26 deployer obligations.EU AI Act Organize work across Govern, Map, Measure, and Manage.NIST AI RMF Connect evidence to an AI management system.ISO/IEC 42001 Plan safeguards for AI workflows that handle protected health information.HIPAA Review saved assessments of six security criteria.SOC 2 Understand erasure workflows and retained integrity records.GDPR erasure

Build operating controls

Find field names and values for your industry’s recorded evidence.Industry coverage library Start with reusable patterns, then test them against your own applications.Policy rule templates Prepare, validate, and deliver a scoped evidence package.Evidence export