How Alethexis works
Alethexis turns your company's AI use into a governed register: what is in use, at what risk, who answers for each piece and what evidence exists. This is the full journey.
Discover
Start with what is already happening: the AI tools your team uses today, the ones under contract and the ones that arrived on their own. The diagnostic and the discovery guides give you the first list.
How much AI does your company already use?
Most companies answer "not much". And then they tick three or more of these boxes:
Each box is an AI system with obligations of its own: some already in force since February 2025. Nobody decided to "adopt AI" — it arrived inside the tools.
Build an inventory
Each system enters the inventory with its record: vendor, purpose, data it processes, who uses it and since when. The registration date matters: transitional rules of the Regulation depend on it.
Classify
Each system is placed within the framework of the EU AI Act and the GDPR according to its case: prohibited, high risk, transparency obligations or minimal risk, with the rationale documented and the date and author of the decision.
Assign owners
Every obligation and every control has a name behind it. The responsibility matrix puts in writing who decides, who executes and who reviews.
Operate controls
Controls are operated and recorded: vendor reviews, AI literacy measures, human oversight, incidents. What gets done stays on record; what is missing shows.
Generate evidence
Every record is exportable and traceable: per-system history, the author of each change, integrity verifiable via SHA-256. When someone asks for evidence, it is there.
When they ask, you do not draft an answer. You open it.
The day the question arrives — from a client, from an insurer, from an auditor, from the board — this is what you show:
- Your AI systems inventory, complete and up to date.
- The risk classification of each system, with its legal basis.
- The evidence: what was done, who did it and when, document by document.
Not a report from eight months ago. Your situation today, traceable back to its origin.
Keep it current
Governance is not a snapshot. Changes in systems, vendors and regulation enter the same register, with their trail.