AI Act
AI Act readiness starts with risk and role mapping, not a compliance label
A practical first review for AI product teams: map public claims, use cases, owners, and evidence before making readiness claims.
First safe question: Which public AI claims and workflows already have owners and evidence?
Download checklistEuropean Accessibility Act
EAA review should begin with customer journeys, not generic accessibility claims
E-commerce, banking, transport, e-book, and digital-service teams should map covered journeys before trying to scope remediation.
First safe question: Which checkout, account, booking, support, or content-access journey is in scope?
Download checklistNIS2
NIS2 scope reads should split direct entity status from supplier evidence pressure
Digital infrastructure, platforms, managed services, and suppliers need different first questions before evidence work starts.
First safe question: Are we a relevant entity, supplier to one, or monitoring customer evidence pressure?
Download checklistDORA
DORA makes ICT third-party evidence an ongoing monitoring task, not a one-off file request
Financial entities and ICT suppliers should organize evidence and ownership before review pressure peaks.
First safe question: Which ICT services, owners, and evidence files would be hard to assemble this week?
Download checklist