High-Risk Ready
Prepare your most exposed systems with traceable, auditable documentation.
8 users included
Includes everything in M1 and M2
What it solves
AI systems with the greatest impact on people require formal assessments and well-founded documentation. M3 gives you the instruments to prepare them rigorously, with traceable documents and an evidence file ready for external review.
What it includes
FRIA · Fundamental rights impact assessment
Structured assessment under Art. 27, with a PDF and a SHA-256 integrity hash. The FRIA is an instrument independent of the DPIA.
DPIA · Data protection impact assessment
Assessment under Art. 35 GDPR, with PDF. The DPIA is an instrument independent of the FRIA, never a substitute for it.
Auditable evidence
Evidence file with verifiable integrity (hash), structured for audit and external review.
Assisted legal reference
The relevant legal references, at hand and connected to your documentation.
High-risk own product
For the provider of an Annex III high-risk system: high-risk documentation, conformity and post-market monitoring, per version. Alethexis keeps what you record and generates documents and drafts; it does not review them, nor sign or submit anything on the provider's behalf.
What Article 26 asks of the deployer of a high-risk system, paragraph by paragraph →
Is your company the provider of a high-risk system? What M3 documents for the provider →
What your board wants to know, without you having to prepare it.
A report with the recorded state of your AI governance, as a map of obligations: those that apply under the classification of your systems, each with its date of application; the detail of each system —high-risk route, role, screening and impact assessment—; and what is pending recording or review, each line linked to the screen where it is resolved. It includes the AI literacy measures recorded and, from the second PDF onwards, the change since the previous one. It is generated on the spot and downloaded as a hash-stamped PDF.
- No percentages or overall scores: it reflects the recorded state, not a rating.
- A 30, 90 or 365-day period for decisions and evidence.
- No personal names: it can travel by email.
Everything is logged. And it can be checked.
Every action in Alethexis — who created a system, who classified it, who closed a section, who downloaded a document — is logged in an audit trail with its author, date and integrity hash. The hashes are chained and verified every day: it is designed so that, if anyone alters or deletes a record, it is detected. The Owner, the DPO and the Auditor consult it with filters and export it as a hash-stamped CSV or PDF, without having to ask anyone.
- Author, role, date and hash on every action.
- Daily integrity check, shown on screen.
- Export for your external auditor, with the verification included.
Your auditor reviews it on their own.
You give an external auditor a temporary access — 7, 30 or 90 days — with a link and a code they receive by email. There is no need to create an account for them or add them to your team. They see the inventory, the classifications, the status of the sections, the approval history, the evidence index and the audit log, in a minimised view, with no direct user identifiers. Every access and every download are logged, you can disable downloads, and you revoke it whenever you want.
- Read-only, with a mandatory expiry.
- Access and downloads logged in your history.
- Immediate revocation.
Decisions, with a name and a date.
The FRIA and the DPIA remain independent instruments — Article 27 of the AI Act and Article 35 of the GDPR — and each has its own circuit: submission, the DPO's opinion and a recorded approval by the Owner, with a hash and a server timestamp. The approval history travels with the PDF of each assessment. Each decision keeps an exact copy of what its approval covers, with its integrity hash: if the section is reopened, the earlier approval stays intact and the new one is kept apart.
Before using a new AI tool, you ask.
Any member can request the use of an AI tool: what it is, what it is for, who will use it and whether it processes personal data. The AI Officer reviews it — and the DPO too if there is personal data — and the Owner or the AI Officer records the decision. Once the approval is recorded, the tool enters the inventory on its own and follows the normal classification circuit. Nobody has to chase anybody: each person gets at most one email a day with what is pending, and each item is reminded once a week while it stays pending.
Alethexis talks to your systems.
A read API to query your inventory, classification, control status, evidence and audit log from your own tools or your advisor's. Webhooks to get notified when a section is closed, an approval is recorded or a high risk appears. And single sign-on with Microsoft Entra ID or Google Workspace. All included from M2; public documentation at /docs/api.
- Read-only API with keys per organisation and a quota.
- Webhooks with retries and a delivery log.
- SSO per organisation, which the Owner can make mandatory.
A look at the screen
Illustrative representation of the module interface · sample data.
FRIA — Fundamental rights impact assessment
Signed off · v2FRIA signed off on 12 Mar 2026. Any change to its content requires a new version.
SHA-256: 9f2a7c1e4b8d… (integrity hash)
Download PDFWhat you take away
- FRIA as PDF
- DPIA as PDF
- Auditable evidence file
Users and support
8 users included · additional users: €16/user/month.
Priority support: first response within one business day.
Requests are handled through the ticketing system built into the platform, with tracking and traceability for each one.
Ready to get started with M3?
14-day free trial, no card required. Configured for your sector.
See all modules