SIS-licensed ISO clauses and controls·an add-on inside the AI clients and agents you already use
    Sector · AI governance

    AI governance

    Classify the system, map the obligations, and ground every duty in the article of the AI Act.

    Ansvar is a gateway for the AI assistant your team already uses — Claude, Microsoft Copilot, any MCP client. Connect it, and every answer below comes back cited to the provision or marked unresolved.

    FullAI Act, article-level
    Art. 6high-risk test + Annex III
    Freethe whole Act, every tier

    The full EU AI Act, article by article — prohibited practices, the high-risk test, provider and deployer duties, conformity assessment, GPAI. The deadlines are live: GPAI duties have applied since 2 August 2025, the Article 50 transparency duties apply from 2 August 2026, and the high-risk regime — postponed by the 2026 Digital Omnibus — applies from 2 December 2027 (Annex III) and 2 August 2028 (Annex I embedded). Ask where your system lands and get the provision; then run the readiness gap analysis that turns it into an obligation register.

    what we cover

    The law and standards we ground on

    Regulation

    EU AI Act (Reg (EU) 2024/1689)

    full article-level, incl. annexes, definitions & recitals

    Regulation

    Risk classification — prohibited practices (Art. 5), high-risk (Art. 6 + Annex III)

    Regulation

    Role duties — provider (Art. 16), deployer (Art. 26), FRIA (Art. 27), conformity (Art. 43)

    Regulation

    GPAI & systemic-risk model provisions (Art. 51–55)

    Regulation

    GDPR intersection — automated decisions (Art. 22), DPIA trigger (Art. 35)

    GuidancePremium

    EU AI Office guidance

    Standard

    ISO/IEC 42001 — AI management systems

    the standard text itself, cited verbatim, as the SIS-licensed add-on — one of five live standards (/standards)

    what you can do

    Workflows that turn it into evidence

    AI Act readiness & gap analysis

    classify the role (provider / deployer / importer / distributor), map it to obligations, and produce a per-obligation gap register

    FRIA — EU AI Act Art. 27

    the deployer fundamental-rights impact assessment, with a Sweden variant

    DPIA for AI systems processing personal data

    GDPR Art. 35, with Germany and Sweden variants

    STRIDE threat model of the AI system

    over your architecture and data-flow diagram

    Document review, paragraph-cited

    model cards, technical documentation and AI-governance policies against the Act

    assembledPremium

    Role & obligation classification as cited research

    free single-jurisdiction search; premium adds AI Office guidance — also delivered as the senior-reviewed AI Act Readiness assessment

    STRIDE threat-model workflows run on every plan against a system you describe — 1 run a month on Free, 2 on Solo, 5 on Premium, which also adds the LINDDUN and TARA families, the rendered reports, and case law inside the run. Document-grounded workflows run on Team and Company. Every tier runs the same corpora as cited research inside your own AI client.

    Questions buyers ask first

    Do you classify our system as high-risk for us?
    The workflow grounds the classification in Art. 5, Art. 6 and Annex III and shows the reasoning cited to the Act. The legal call stays yours, or our senior-reviewed AI Act Readiness service makes it — there is no one-click 'high-risk' verdict.
    Is the AI Act transposed differently per country?
    No. The AI Act is an EU Regulation with direct effect — there is no national transposition to track. National measures concern enforcement authorities and a few narrow derogations, not the obligations themselves.
    When do the AI Act obligations actually apply?
    In stages: prohibited practices and AI-literacy duties since 2 February 2025, GPAI obligations since 2 August 2025, and the Article 50 transparency duties from 2 August 2026. The high-risk regime was postponed by the 2026 Digital Omnibus: stand-alone Annex III systems apply from 2 December 2027 and Annex I embedded systems from 2 August 2028. The corpus serves the full Act today, so you can build the obligation register before your date lands.

    Run it against your own systems

    Connect the AI client you already use and ask your first cited question — Free, Solo, Premium and Team are self-serve.

    Building ai governance compliance? It works today — we take on a few design partners per sector to tune it to your team.