Organisational AI Act compliance – policies, procedures and processes
After the audit comes implementation: we turn AI Act obligations into policies, procedures and processes that work in your organisation and can be demonstrated to regulators and business partners.
Scope
- AI policies and procedures – tool approval, human oversight, output verification, incidents.
- Deployer processes for high-risk systems – Article 26 AI Act.
- Provider processes – Article 16 AI Act obligations, quality management system under Article 17 AI Act, technical documentation.
- Transparency obligations – Article 50 AI Act.
- DPIA (Article 35 GDPR) and fundamental rights impact assessment (Article 27 AI Act) where required.
ISO/IEC 42001 and EN 18286
ISO/IEC 42001 describes an AI management system, and EN 18286:2026 a quality management system for AI Act regulatory purposes linked to Article 17 AI Act. We design policies and procedures so that they can serve as the basis for implementing these standards and preparing for certification.
Frequently asked questions
Does ISO/IEC 42001 certification prove AI Act compliance?
Not directly. It confirms an AI management system in line with the standard; it helps show due diligence but does not replace specific AI Act obligations.
Guides
Practical explanations of the rules related to this service.
Let us discuss your matter
The first conversation is used to define the scope of the matter and the fee.