Alethexis Trust Center
Other sectors
Active modules: M1 Visibility · M2 Governance · M3 High-Risk Ready · Agentic Add-on
Trust Profile
Documented
Risk classification
By role
Data protection impact assessment
By status
By category
By severity
6 green · 4 amber · 0 red · 0 pending
The controls in Alethexis's catalogue, grouped by module and domain. The figure is the live count from the database: the same one the trust page publishes.
246 controls in the catalogue, 242 active · live count on 12 October 2026.
Control status as of 1 October 2026, from the organisation’s latest count.
| Domain | Controls | Active | Documented | Under review | Not applicable |
|---|---|---|---|---|---|
| M1 · Visibility | |||||
| AI system inventory | 15 | 15 | 0 | 31 | 0 |
| AI literacy | 10 | 10 | 0 | 9 | 0 |
| Algorithmic transparency at work | 2 | 2 | 0 | 0 | 0 |
| Baseline governance | 10 | 9 | 0 | 9 | 0 |
| Unauthorised AI (shadow AI) | 5 | 5 | 0 | 5 | 0 |
| M2 · Governance | |||||
| Governance committee | 10 | 10 | 0 | 10 | 0 |
| RACI matrix | 10 | 10 | 0 | 10 | 0 |
| Policy framework | 10 | 10 | 0 | 9 | 0 |
| Evidence management | 10 | 10 | 0 | 13 | 1 |
| Incident response | 10 | 8 | 0 | 8 | 0 |
| Provider obligations | 12 | 12 | 0 | 0 | 0 |
| Data protection | 1 | 1 | 0 | 4 | 1 |
| Digital rights | 6 | 5 | 0 | 7 | 2 |
| Governance | 1 | 1 | 0 | 1 | 0 |
| AI in the workplace | 3 | 3 | 0 | 5 | 2 |
| Breaches and incidents | 2 | 2 | 0 | 2 | 0 |
| Penalties regime | 1 | 1 | 0 | 1 | 0 |
| M3 · High-Risk Ready | |||||
| High-risk classification | 10 | 10 | 0 | 50 | 6 |
| Fundamental rights impact assessment (FRIA) | 10 | 10 | 0 | 0 | 0 |
| Data protection impact assessment (DPIA) | 10 | 10 | 0 | 37 | 9 |
| High-risk readiness | 11 | 11 | 0 | 0 | 0 |
| High-risk provider obligations | 60 | 60 | 0 | 0 | 0 |
| Audit readiness | 5 | 5 | 0 | 4 | 0 |
| Agentic | |||||
| Agent governance | 12 | 12 | 0 | 0 | 0 |
| Agent oversight | 10 | 10 | 0 | 0 | 0 |
These badges mark documentation milestones recorded by the organisation itself in Alethexis (inventory, governance, assessments). They are not external seals or accreditations, and they do not assert legal conformity: the organisation remains responsible for its own obligations.
The indicators show the state recorded on the platform on the update date. An indicator at zero or incomplete shows where the organisation is in the process; it is not an assessment of its compliance.
Documented with Alethexis · Updated on 01 October 2026
alethexis.com · AI Governance & Compliance Framework for SMEs™