The complete EU AI Act workspace. Every article, every annex, every deadline.
TrustWays AI covers Articles 5, 6, 9–15, 22, 25, 27, 50, 71, 72, 73 and Annexes I, III, IV out of the box. Two-thirds of our customer base evaluated three other tools before us; the depth of regulatory coverage is what they cite as the reason for switching.
Four staggered deadlines. We track them per system.
Every operative article — handled.
The matrix below maps every article that imposes an operational obligation to the platform module that handles it.
Eight Unacceptable-Risk practices banned outright. The wizard covers all clauses (a)–(h) including real-time remote biometric ID by law enforcement.
Eight Annex III categories that trigger high-risk + the Article 6(3) advisory-only derogation. We compute both deterministically.
Iterative risk management process with documented identification, estimation, evaluation, and mitigation. Our risk register is its operational form.
Training, validation, and test data quality + bias examination. Datasets module + bias-examination workflow.
12-section Annex IV template generated from your system context. Reviewer-signed, branded, hash-chained.
Automatic event logging with retention. Our SHA-256 hash chain satisfies the tamper-evidence requirement.
Instructions for Use (IFU) document type generated from your system + tech stack.
Human-in-the-loop playbook templates + escalation thresholds tied to your model risk score.
Drift, bias, adversarial-robustness telemetry per system + threshold-based alerting.
Mandatory for non-EU providers placing AI on the EU market. We track this on the entity record + auto-create gaps when missing.
Auto-applied to every high-risk system whose output reaches EU users — including extraterritorial cases under Art. 2(1)(c).
Fundamental Rights Impact Assessment for public bodies and essential-services deployers. Template + workflow built-in.
Disclosure obligations for chatbots, deepfakes, emotion-recognition, biometric categorisation. Limited-risk tier output.
Pre-deployment registration for high-risk systems. We generate the submission packet from your platform data.
Continuous monitoring plan + execution. Monitoring module covers it end-to-end.
72-hour notification + 15-day full report. Incident workflow includes both clocks with visible countdowns.
Article 2(1)(c) — when the Act reaches you.
The most-missed clause of the Act. Any provider placing an AI system on the EU market — even if established outside the EU — falls within scope. Output used in the EU is enough.
We detect this automatically: combine entity establishment with system markets-served and output-used-in-EU flags, and the extraterritorial finding fires with Article 22 representative gap creation as a follow-up.
Get audit-ready before Aug 2, 2026.
See the platform classify a system from your stack — live — in 30 minutes. No NDAs required for the demo.