EU
EU AI Act
Risk-based legal requirements; obligations depend on the system, role, use case and applicable dates.
Explore →Compliance / Standards / Evidence
AI regulation and compliance
Understand how AI laws, regulatory guidance and management-system standards translate into practical organisational obligations and evidence.
Discuss your organisation →Explore the diagnostic
Frameworks and regulatory areas
UK
UK AI regulation
Sector-led UK regulatory expectations, privacy, equality, consumer protection and other applicable rules.
Explore →
NIST
NIST AI Risk Management Framework
A voluntary risk management framework organised around Govern, Map, Measure and Manage.
Explore →
ISO
ISO/IEC 42001
AI management system standard covering organisational governance and continual improvement.
Explore →
Privacy
Data protection and privacy
Personal data, lawful processing, impact assessment, minimisation and accountability.
Explore →
Sector
Sector-specific obligations
Requirements vary across financial services, healthcare, employment and public services.
Explore →A practical compliance workflow
1. Scope
Record geography, provider/deployer role, purpose, affected people and system characteristics.
2. Determine applicability
Identify potentially relevant laws, standards and supervisory expectations; obtain qualified legal review.
3. Map controls
Link obligations to owners, procedures, tests and retained evidence.
4. Review continuously
Reassess after significant changes, incidents and regulatory updates.
Content is general educational information. It does not determine whether a particular AI system is legally compliant.
Interactive shiftedAI tools
Apply the framework
Lifecycle assurance
SDLC Control Explorer
Filter controls by delivery stage and domain; export the evidence checklist.
Open explorer →
Regulatory discovery
Compliance Navigator
Identify the questions to investigate for your jurisdiction and use case.
Explore considerations →
Risk management
Risk Register Builder
Build and export a lightweight AI risk register in your browser.
Build a register →