Compliance, every framework included
AuditRails satisfies 8 compliance frameworks, all bundled free on Compliance Trails. No per-framework fee, ever. Tamper-evident retention that scales to each framework's requirement. Auditor-ready reports.
EU AI Act, articles covered
Our deepest framework detail, since AI Act deadlines got us started. Five articles are auto-verified by ingest pattern alone. Three more we support, you provide the process and documentation.
Learn more →AI Act articles auto-verified
Article 12
Automatic recording of events
High-risk AI systems must log events that ensure traceability over the lifetime of the system.
How: Every aiact.model_inference_logged event extends the per-tenant tamper-evident hash chain. Logs are retained for at least 10 years in WORM storage.
Article 14
Human oversight measures
High-risk AI systems must support effective human oversight, including the ability to intervene or interrupt operation.
How: Log every operator override, stop, or correction as a human_oversight_intervention event. AuditRails verifies presence of these events for every system in production.
Article 50
Transparency obligations to natural persons
Users interacting with an AI system must be informed that they are interacting with AI, unless obvious from context.
How: Log every disclosure shown to an end user as a transparency_disclosure_shown event. AuditRails verifies coverage across user-facing AI flows.
Article 72
Post-market monitoring system
Providers must establish a post-market monitoring system to evaluate continuous compliance.
How: Stream drift, accuracy, and field-incident signals as post_market_monitoring_event entries. AuditRails confirms a continuous stream is present.
Article 73
Reporting of serious incidents
Providers must report any serious incident or malfunction to market surveillance authorities within strict deadlines.
How: Capture each incident as a serious_incident_logged event with severity and authority-notification metadata. AuditRails surfaces notification-deadline coverage.
Article 9
Risk management system
Providers must establish a continuous, iterative risk management system across the full lifecycle.
How: AuditRails records each risk_management_review event for the audit trail. Documentation + process is your responsibility.
Article 10
Data and data governance
Training, validation, and testing datasets must be subject to governance, including provenance and bias detection.
How: Log each dataset version change as a training_data_lineage_recorded event. Dataset cards + bias review are your responsibility.
Article 43
Conformity assessment procedure
Providers must complete the relevant conformity assessment before placing the system on the market.
How: Record each completed assessment as a conformity_assessment_record event with the certificate reference. The assessment itself is performed by a notified body.
7 more frameworks, all available now
Every framework below is active today and bundled free on Compliance Trails, enable any of them from Settings in minutes, no separate fee, no waiting on a roadmap.
Need a framework that's not listed? Talk to us or build your own directly in the dashboard.
Get audit-ready, for every framework you need.
30-day free trial. No credit card required.
Start free trial