Frameworks we audit against
An audit is scoped against the instruments that actually apply to you. These are the ones we work to most often — if yours is not listed, ask: the method is the same.
Core
European Union
EU AI Act
High-risk obligations, enforceable since 2 Aug 2026
International
ISO/IEC 42001
AI management system controls, clause by clause
United States
NIST AI RMF
Govern, Map, Measure and Manage, assessed end to end
European Union / UK
GDPR
Lawful basis, DPIAs, data subject rights and Article 22
New York City, US
NYC Local Law 144
Bias audits for automated employment decision tools
Colorado, US
Colorado AI Law (SB 26-189)
Disclosure duties for automated decision-making technology
Colorado, US
Colorado SB 21-169
ECDIS governance for life, auto and health insurers
United States
NAIC AI Principles
Insurance-regulator expectations for AI governance
Texas, US
Texas AI Act
Prohibited uses, disclosure and record-keeping
Singapore
Singapore PDPA
Transparency, traceability and outcome monitoring