Regulated AI Navigator

Turn an AI use case into its EU AI Act risk class, the regulations it triggers, the obligations, the architecture and the evidence you owe — in about two minutes.

Community-curated knowledge graph, peer-reviewed by experts across law, engineering and governance. Every change traceable →

Analyse a use case →Browse 35 profiles

Regulation coverage

Every regulation in the graph resolves into concrete technical components — through an article obligation, a control objective, a design pattern or an evidence artefact that a component must produce. Pick a regulation to see its technical surface, how each component is derived, and in which of the triggering use cases it is actually part of the required stack. The gap counts show where the graph reaches a component that no use case yet requires — those are open contribution targets, not settled answers. Open the full graph →

eIDAS 2 (EUDI / Trust Services)

source EUR-Lex

European Digital Identity framework and trust services. For AI assurance the decisive part is the trust-service toolbox: qualified electronic timestamps and the new qualified electronic ledgers (Art. 45k) carry a legal presumption of integrity and of unique, accurate sequential ordering — the legally strongest anchor available for audit-trail evidence in the EU. Turns 'our logs are WORM-stored' into 'our log integrity enjoys a statutory presumption'.

3 components0 articles / obligations0 triggering use casesopen in graph

External Trust Anchor (Qualified Timestamp / Ledger)

0% of use cases

Takes integrity proofs out of the operator's trust domain: periodic anchoring of log hash-chain heads via qualified electronic timestamps or a (qualified) electronic ledger per eIDAS 2, with signing keys held outside the operating team (key ceremony, HSM, separation of duties). Answers the insider test — a party who controls the vault cannot rewrite history without the anchor exposing it. Cost profile: anchoring is periodic and cheap; it upgrades every downstream log-based artifact at once.

  • named in regulationeIDAS 2 (EUDI / Trust Services) → External Trust Anchor (Qualified Timestamp / Ledger)qualified timestamp / Art. 45k ledger = statutory presumption of integrity
✓ Confirm✗ Dispute+ Add sourceSign in to validate — every vote requires a source

OpenTelemetry / FCoT Tracing

0% of use cases

Hierarchical trace spans for every sub-task, prompt, retrieved document and API call — the reconstructible decision path for Art. 12/14 and PLD disclosure.

  • evidence artefacteIDAS 2 (EUDI / Trust Services) → Event Logs & Decision Traces → produced by OpenTelemetry / FCoT TracingEvent Logs & Decision Traces
✓ Confirm✗ Dispute+ Add sourceSign in to validate — every vote requires a source

WORM / Immutable Audit Vault

0% of use cases

Append-only, hash-chained audit vault (WORM object-lock storage, AES-256 at rest, TLS 1.3 in transit). Guarantees tamper-evidence within the organization's trust domain — which stops your own team, but not an admin who can rebuild the vault. Pair with an external trust anchor and key ceremonies outside the operating team for evidence that holds against the insider scenario.

  • evidence artefacteIDAS 2 (EUDI / Trust Services) → Event Logs & Decision Traces → produced by WORM / Immutable Audit VaultEvent Logs & Decision Traces
✓ Confirm✗ Dispute+ Add sourceSign in to validate — every vote requires a source