Every AI system mapped to its obligations. One picture your board and regulator can read.
AI Gov Map is a living register and control map. Each model, dataset and agent is tied to the controls, risks and obligations of 34 laws, standards and frameworks, including ISO/IEC 42001, ISO/IEC 27090, NIST AI RMF, the EU AI Act and its first harmonised standard EN 18286, and to the governance-as-code that enforces them in your cloud.
AI systems 31 / 34 controls
| System | Risk tier | ISO 42001 | EU AI Act | Status |
|---|---|---|---|---|
| Claims triage agent | High | 31 / 34 | Annex III | Review |
| Customer copilot | Limited | 34 / 34 | Art. 50 | Compliant |
| Credit scoring model | High | 22 / 34 | Annex III | Gap |
| HR screening assistant | High | 29 / 34 | Annex III | Review |
| Document summariser | Minimal | 34 / 34 | — | Compliant |
What it does
- Registers every AI system with owner, purpose, data scope and risk tier
- Crosswalks ISO/IEC 42001 Annex A, ISO/IEC 27090 threats, NIST AI RMF, EU AI Act and EN 18286 obligations per system
- Links each control to its governance-as-code implementation and evidence
- Produces board, audit and regulator reports on a schedule
- Sector and jurisdiction profiles for health, financial services, public sector, energy and more
Free to start. GovMap when you need audit-ready.
AI governance compliance-as-code
Vendor-native policy packs for Microsoft Foundry, Copilot Studio, Amazon Bedrock, Google Cloud Vertex AI, OpenAI, Anthropic Claude, Mistral AI and Meta Llama, as Terraform plus each vendor's native IaC or admin API. MLOps gates for ISO/IEC 27001, ISO/IEC 42001 and the EU AI Act.
View on GitHub →The register, the crosswalks and the reports
Everything in the open core plus the living AI system register, framework crosswalks, sector compliance profiles, evidence collection and board reporting. Built to compete with enterprise GRC suites at a fraction of the effort.
Request a demoSee your AI estate on one map.
Request a demo or start with the open-source packs today.