Skip to content
AI Compliance Tool
Check my AI risk
PlatformSolutionsPricingRegulationsFree toolsGuides Partners Sign in

Solutions · SaaS companies

Your customers will send you a questionnaire. Have the answers ready.

When you add AI features you become a provider or developer in several legal frameworks and a vendor in every customer’s due diligence. Maintain system cards, document evaluations and keep a current inventory you can share.

Check my AI risk — freeSee the demo

Typical AI uses

  • LLM features inside the product
  • Fine-tuned or custom models
  • AI agents acting in customer accounts
  • Internal copilots for engineering and support
  • Synthetic content generation

Where obligations differ

Illustrative, not legal advice. The assessment screens your actual profile against the verified dataset.

  • Internal engineering copilots

    low

    Confidentiality and licence terms for code.

  • Customer-facing AI features that generate content or interact with people

    elevated

    EU Art. 50 transparency (from 2 August 2026), FTC substantiation of AI claims, Texas and Utah disclosure rules.

  • Features used for consequential decisions by customers

    high

    Provider/developer documentation duties (EU Annex III from December 2027; Colorado developer duties from January 2027).

Starter inventory

A template you can customize in the workspace or import from CSV.

SystemPurposeDataOversight
In-product assistantHelp users complete tasksCustomer contentUser confirms actions
Fine-tuned classification modelCategorise recordsCustomer data (processor)Evaluation suite; customer override
Support copilotDraft repliesCustomer ticketsAgent review

First four steps

  1. Create a system card for each AI feature
  2. Record provider/deployer roles per jurisdiction
  3. Publish an AI use statement for customers
  4. Keep evaluation results as evidence

Guides

  • AI Agent Governance Explained

    What makes AI agents different from chatbots, and how to govern them: permission matrix, autonomy levels, approval gates, logging, override and escalation, with a CRM incident example.

  • The EU AI Act for Canadian Companies

    When a Canadian business falls under the EU AI Act, the difference between provider and deployer, the risk tiers, the post-Omnibus timeline, and practical next steps.

  • ISO 42001 vs NIST AI RMF: Which Should a Small Business Use?

    A plain-language comparison of ISO/IEC 42001 and the NIST AI RMF for small businesses: structure, certification, cost, how they map, and how both relate to actual law.