Guides and sample records for the registers regulators read: DORA, NIS2, GDPR and the EU AI Act.
Guides
Practical methods for teams building governance and compliance programmes
26 of the top 50 shadow IT apps discovered in 2025 were AI tools, processing data and making decisions that carry documentation obligations. Five visibility gaps that sit between organisations and confident governance - and what each costs under EU AI Act, DORA, NIS2, and GDPR.
78% of organisations haven't taken meaningful steps toward EU AI Act compliance, and August 2, 2026 is the enforcement deadline for high-risk systems. A practical guide to risk classification, the provider/deployer distinction, prohibited practices, and a six-phase action plan.
EU AI Act, GDPR, NIS2, and DORA apply simultaneously to the same AI system, and most enterprises govern only the AI they know about. Four-regulation collision, shadow AI compliance gaps, a five-level maturity diagnostic, and what governance infrastructure looks like at scale.
Reports
Original research on governance maturity and regulatory readiness across Europe
Your AI register captures 50–70% of what's running. The rest creates violations under DORA, GDPR, NIS2, and EU AI Act simultaneously. Primary research from 200+ financial services practitioners on the compound exposure, the deployer gap, and what to do before August 2026.
Common questions about accessing and using our resources
Monthly updates on regulatory changes, compliance trends, and platform releases
By subscribing you agree to our Terms and Conditions and Privacy Policy
