Blog

AI compliance in 2026: what changed, what's required, where to start

2026 is the year AI compliance stops being theoretical. Here are the dates that bite, the overlaps worth exploiting, and what to ship first so enforcement does not catch you cold.

NIST AI Risk Management Framework: the engineering spec for AI risk

The NIST AI RMF is voluntary, which is exactly why it spreads. Here is what it actually asks for, how it lines up with EU AI Act and ISO 42001, and how to implement it without the ceremony.

ISO 42001 certification: what it actually takes

ISO 42001 certification, explained by the organisation that went through it first. Six stages, realistic timelines by organisation size, certification costs that nobody else publishes, and the auditor questions that actually separate a certifiable AI management system from a theatrical one. Written by Europe's first ISO/IEC 42001-certified AI governance platform vendor.

What is agentic AI, and why it is already out of bounds under the EU AI Act

Agentic AI does not just predict, it acts. Here is a clean definition, where the risk concentrates, and the governance moves that keep autonomy on the right side of liability.

AI governance assessment: why most of them have already failed

An AI governance assessment that ends with a PDF has already failed. The market is full of 60-page deliverables that go stale in weeks and cannot show supervisors evidence generated this quarter. This is what the assessment worth running actually produces, why most organisations only inventory 20% of their AI estate, and what to refuse when buying one.

AI governance tools in 2026: one category is splitting in two

The AI governance tools category is splitting in two. On one side, compliance automation: templates, form-filling agents, dashboards that turn green. On the other, governance automation: platforms that connect to your stack, verify what is actually deployed, and produce evidence that survives an audit. Both call themselves AI governance platforms. Only one of them will. Six evaluation criteria and a 30-minute vendor stress test.

A Government Organization

A Global Consumer Brand and Technology Group

CBUAE AI Guidance Note: What Financial Institutions Need Now

The CBUAE's new AI guidance note sets clear supervisory expectations for every licensed financial institution in the UAE. We break down the operational requirements, from AI inventories to kill switches, and map control-level overlap with the EU AI Act, DORA, and NIS2.