Assess where your governance actually stands, then generate the artifacts a regulated organisation needs — acceptable-use policy, validation SOP, human-in-the-loop protocol, risk register, vendor assessment, incident procedure and the board memo that gets it funded.
Used only to personalise the generated drafts in your browser. Nothing is transmitted or stored anywhere.
Every artifact's purpose and full section structure is visible free — so you can build your own from the outline if you'd rather. What's paid is the drafted clause text.
The plan for this product included an annual update subscription, since regulation moves. That needs a billing relationship and a delivery mechanism this static app doesn't have, so it's shown as roadmap rather than sold. What you buy today is a dated pack you own.
No, and treat any AI-governance template that claims otherwise as a red flag. These are drafting templates that collapse the blank-page phase. Your counsel and quality function must review, adapt and approve them, and issue them under your document control. What you're buying is a strong starting draft, not a compliant position.
No. No document pack can. Compliance depends on what your AI actually does, your role in the value chain, your risk tier and your jurisdiction. The control mapping here is a structural cross-reference to help you run your own gap analysis — it maps to obligation categories rather than reciting clause numbers, precisely because clause-level detail changes and a static pack would get it wrong. Verify against primary sources.
Because this page can't update itself. The architecture of AI governance — risk classification, data governance, technical documentation, human oversight, post-market monitoring, incident reporting — has been stable even as the detail moves. Anchoring there stays useful; anchoring to a clause number would quietly go stale and mislead you.
No. There's no backend. The assessment, scoring and document generation all run in your browser, which matters when the input is a candid account of your governance gaps. Nothing is transmitted or stored server-side.
Probably, and the pack says so. It's written for pharma, healthcare, medical devices and financial services, plus the GCC teams operating their systems. If you're outside that, cut rather than carry — an unnecessarily heavy policy nobody follows is worse than a light one they do.
Enter it here — it unlocks the full clause text and control mapping on this device.
Enter your licence code (from your receipt). It unlocks the full drafted clause text, the control mapping and the personalised export on this device.
No code yet? See pricing →