White paper
AI governance for regulated firms
Make every AI
decision one you
can defend.
Standard Intelligence gives boards, senior managers and their teams one route from first idea to signed-off evidence, built around the EU AI Act, DORA and NIS2.
The problem, in full
The Rules Change Monthly. Will Your Answers Hold Up?
Dated
45 major deadlines across 36 regimes. 21 fall in the next six months.Multiplying
Over 2,100 AI bills introduced in 2026 alone.Conflicting
The AI Act requires bias testing on sensitive data. The GDPR restricts processing it.
“What happened with this system at 16:42 on 2 September 2026? Who did it affect, who was accountable, and what was done about it?”
Sources: Regulation (EU) 2024/1689; Regulation (EU) 2016/679. Deadline counts as of October 2026.
How we solve it
One AI System. Hundreds of Obligations. One Record.
A question asked once feeds every regime that depends on the answer.
Asked OnceEach regime's duties resolve to a small set of controls. One question settles each control.
The question
What candidate data does the system use, and who holds it?
Answered once, by a named personUsed Everywhere It Is NeededThe answer is a fact. Every duty that depends on it takes it, with the evidence behind it.
One answer
- EU AI Actdata governancesealed
- GDPRlawful basissealed
- DORAthird partiescovered, unproven
- NIS2supply chainsealed
- Foreigndata transfersno evidence
One RecordWhichever regulator asks, the answer, who gave it and the proof are already in one place.
Record entrysealed
- Question
- Candidate data and who holds it
- Answered by
- Data Protection Officer
- Source
- Cited to the regulation text
- Feeds
- EU AI Act, GDPR, DORA, NIS2, Foreign
One system. Every duty from six regimes, each one traced to the record.
Duties for one CV-screening AI system, flowing from six regimes through duty class, control, disposition and evidence into one record for the regulator
- derived from the regulation text
- decided by a named person
- sealed
- covered, not yet evidenced
- no evidence
- out of scope
A schematic: a 5,000-person financial-services firm, one high-risk system (Annex III). The number of lines is not a count of duties, and the example question is illustrative.
When the board asks, one document answers.
Why you can trust us
Built for People Who Check.
EU/UK Sovereign
All customer services are held in the EU and UK. Your data is stored and processed there in every environment, production, testing and support alike.
Grounded in Text
All obligations are cited and traceable to their authoritative regulatory publications. Each one quotes the provision it rests on, held exactly as the official source published it. When the law changes, the record changes with it.
AI Transparency
We are transparent about where we use AI and where we use our own intellectual property. AI is one of the tools we use, but it never replaces decades of regulatory judgement. Our AI Use Disclosure sets out where each applies.
Certifications in progress
- In ProgressISO/IEC 27001
- In ProgressISO/IEC 42001
- In ProgressCyber Essentials Plus
White paper
Ungoverned AI Systems
Ungoverned AI puts £1.6 trillion to £4.4 trillion a year at risk on our model, a measure of exposure, not a forecast of loss.
Your next step