Blog

Oversight

From Obligation to Evidence: A Methodology for Multi-Regulatory AI Governance

A single AI system rarely sits under a single rulebook. This paper sets out TRACE, a five-phase methodology for governing AI across overlapping frameworks, and a maturity model for locating where an organisation stands.

AI GovernanceRegulatory Technology

The EU AI Act's Forgotten Half: What Article 26 Means for Deployers

Most EU AI Act guidance targets providers. Article 26 places eight complex obligations, plus the Fundamental Rights Impact Assessment, on deployers of high-risk AI. Here is where to begin.

EU AI Act

The EU AI Database: What to Register, When, and to Whom

High-risk AI must be registered in the EU database. This paper covers who registers, what Annex VIII requires, the deadlines, and how to keep an entry accurate over time.

AI Governance

Annex IV Is a Living File, Not a One-Off: What Notified Bodies Actually Expect

Annex IV is not a one-off deliverable. It is a living technical file across fourteen elements, and the standard notified bodies expect is higher than the text suggests.

AI Governance

Article 14 and the Problem of Oversight Theatre

Article 14 requires effective human oversight of high-risk AI. The hard part is designing oversight that is genuine rather than nominal, without making the system useless.

AI Governance