AI Governance
Available nowEU AI Act · 2024
The EU AI Act (Regulation (EU) 2024/1689) is the European Union’s risk-based law for artificial intelligence. It sorts AI into tiers, prohibited practices, high-risk systems with strict requirements, limited-risk transparency duties, and minimal-risk, and adds obligations for general-purpose AI models.
31
requirements tracked · part of the standard
Premium
Access
Add-on from $39/mo
Scope
How much of the standard Keel models
Keel models part of this standard, not all of it. A readiness score here is a percentage of the scope described below, not of the whole published standard — so read it that way, and tell your assessor the same.
What is not modelled: The Act is a regulation, not a control set, so it has no canonical leaf inventory. Keel models the enumerable obligations by risk tier. Deciding what "complete" means here is a product decision, not an authoring backlog.
- Authored in Keel
- 31 requirements
- Defined by the standard
- Not verified against the published standard yet, so Keel states no number
Keel publishes this for every framework it ships, complete or not, so a readiness percentage can be read against a denominator you can see. Compare every framework
Who it is for
Who needs EU AI Act?
- Companies placing AI systems on the EU market or serving EU users
- Providers and deployers of high-risk AI use cases
- Teams that need to know which tier their AI falls into and what it triggers
What Keel does
How Keel helps with EU AI Act
- The Act organized by risk tier so you can see which obligations apply to you
- Prohibited practices, high-risk requirements, transparency, and GPAI duties as a control set
- Coverage shared with ISO 42001 and the NIST AI RMF so overlapping work counts once
Collect once, comply everywhere
EU AI Act shares canonical controls with ISO/IEC 42001, NIST AI Risk Management Framework and AI Governance Essentials and others in the catalog. Implement one of those controls and it counts toward every framework it satisfies, so adding EU AI Act rarely means starting from scratch.
Shares canonical controls with
- ISO/IEC 27001
- CIS Critical Security Controls
- PCI DSS
- SOC 2
- SOX (Sarbanes-Oxley) Section 404
- NIST Cybersecurity Framework
- NIST SP 800-53
- NIST SP 800-171
- HIPAA
- GDPR
- COPPA
- Google Play Families
- Amazon Appstore Child-Directed Apps
- Apple App Store Kids Category
- ISO 9001
- AI Governance Essentials
- ISO/IEC 42001
- NIST AI Risk Management Framework
- ESG Essentials
- US Employment Law - Federal Baseline
Other frameworks: ISO/IEC 27001 · CIS Critical Security Controls · PCI DSS · SOC 2 · SOX (Sarbanes-Oxley) Section 404 · NIST Cybersecurity Framework · All frameworks