All features
Grouped by what you need to do: know which AI you use, know what applies to you, decide, assess risk, prove it and connect it to your systems.
Everything you see here is already in the product today. Nothing is described as "coming soon".
Know which AI you use
The starting point: which AI systems the organisation has, who asks for them and which provider they come from.
- AI systems inventoryA living record of all the AI your company uses: purpose, provider, department and your organisation's role in relation to each system. The map you never had.From M1
- AI use requests, also for employees without an accountAn employee asks to use an AI tool; it is reviewed, a decision is recorded, and once the approval is recorded it enters the inventory on its own.From M2
- AI vendor due diligenceA record for each provider and preliminary due diligence to document who you work with and what safeguards they offer.From M1
- AI agentsEach agent documented one by one: purpose, scope and owner. Documented limits, approvals and checkpoints for each agent.Agentic add-on
Know what applies to you
Which risk level each system has and which obligations follow from it, depending on your role in relation to it.
- Risk classificationEach system is placed at its risk level (P0–P6, Alethexis’s internal taxonomy, not the AI Act’s nomenclature), with the AI Act's own logic — prohibited practices and high risk — documented by the platform, case by case, with the rationale recorded. Whatever the level, the AI literacy duty of Art. 4 reaches any company using AI, and it is a measures-based obligation, not one of result.From M1
- Legal framework and timeline of obligationsThe relevant legal references, at hand and connected to your documentation, and the dates of application of the AI Regulation.From M1
- Own product (if you develop AI)Versions, changes and provider obligations, system by system. With M3, the documentation, conformity and post-market monitoring of the provider of a high-risk system.From M2
- Workplace algorithmic transparencyThe inventory records which systems decide on your workforce's working conditions (Real Decreto 723/2026, organisations in Spain). Controls for Real Decreto 723/2026 — informing each worker and requests from existing staff — with their evidence (Spain's national layer).From M1
Decide and assign
Who decides what, under which rules and with which trail.
- AI Use PolicyYour internal policy ready to publish, covering BYOAI and shadow AI. Generated as a PDF to circulate; the acknowledgement panel records who has confirmed reading it.From M1
- AI committee and RACI matrixAI Committee with defined roles, quorum and responsibilities, documented in the Committee Charter, exportable as a PDF with its hash. Who is responsible, who approves, who is consulted and who is informed of each AI decision.From M2
- Recorded approvals and decision logWho recorded the approval, in what role, when, and over which version. History on screen and in the PDF. Every relevant decision is recorded with its context, author and date. Real traceability.From M1
- Change managementLog of changes to any AI system in the inventory and Article 25(1) assessment: it warns when a change would make your organisation the provider of a high-risk system.From M2
- Reminders for pending tasksAt most one email a day per person, with everything pending; each item is reminded once a week while it stays pending.From M2
Assess risk and impact
Risks, impact assessments and incidents, system by system.
- Risk registerRisks identified on a 5×5 heatmap, with their mitigation plan and follow-up.From M2
- FRIA · Fundamental rights impact assessmentStructured assessment under Art. 27, with a PDF and a SHA-256 integrity hash. The FRIA is an instrument independent of the DPIA.From M3
- DPIA · Data protection impact assessmentAssessment under Art. 35 GDPR, with PDF. The DPIA is an instrument independent of the FRIA, never a substitute for it.From M3
- High-risk dossierFor each high-risk system: current FRIA and DPIA, evidence, controls and approvals, exportable to PDF with its hash.From M3
- Incidents and monitoringTiered incident management (N1/N2/N3) and a record of operational events —near misses, drift, degradation, security— for your AI systems.From M2
Prove it
Evidence, records and deliverables to show what has been done to a client, an insurer or an authority.
- Auditable evidenceEvidence repository with a PDF index and a SHA-256 hash. Categories, links and storage grow with the module.From M1
- Verifiable audit logEvery action is logged with its author, date and integrity hash. The Owner, the AI Officer, the DPO and the Auditor consult and export it (CSV and a hash-stamped PDF); an external auditor can review it with a temporary access.From M1
- Access for external auditorsA temporary, read-only link, without adding them to your team. A minimised view of the evidence, with no direct user identifiers. Every access is logged and you revoke it whenever you want.From M2
- Status reportThe obligations that apply under the classification of your systems, with their date of application; the detail of each system and what is pending recording or review, linked to the screen where it is resolved. In a hash-stamped PDF. No percentages or overall scores: it reflects the recorded state, not a rating.From M1
- Documentation of the Art. 4 measuresThe AI use policy, staff acknowledgements and training evidence document the AI literacy measures your organisation takes.From M1
Connect
Reading from your own systems, alerts when something changes, and single sign-on.