Keep your methodology
Your systems, your risk criteria, your ISO 42001 controls and your own formats. You start with what you already have.
AI Act software to comply with the AI Regulation system by system
AI system inventory, risk classification, high-risk requirements, monitoring and model providers in one place. From your first inventory to the technical documentation required by Regulation (EU) 2024/1689.
4,4 · 105 reviews on G2
2,000+ companies trust GlobalSuite®
Managing the AI Act in GlobalSuite®
What the Regulation asks for, what you've already done and what's still missing, all on one platform. Screens show sample data.
Every requirement of the Regulation with its applicability, its status and its level of compliance.
Every requirement of the Regulation with its applicability, its status and its level of compliance.
The AI cross-checks your software contracts against the inventory and finds the AI systems nobody had declared. You add them with their risk level, ready to be rated.
AI agent
Add to inventoryDismiss
✓ 2 systems added to the inventoryAI technology can make mistakes.AI reads each system record and suggests which articles apply and why. You review it and sign it off.
Every alert from a model in production opens a ticket, with its priority, its status and the system affected.
Every model provider with its rating and the questionnaire on the documentation it has given you.
Word and Excel templates for each report the Regulation asks for, filled in with data from the inventory and each system.
Automate the compliance process
You set up the workflow once and GlobalSuite® repeats it: it requests, reminds, collects and updates. Your team only steps in when there's a decision to make.
- Assessment campaignsQuestionnaires sent to each control owner, with reminders until they reply.
- Reviews that launch themselvesEach AI system gets its periodic review, and its owner a reminder before it falls due.
- Approval workflowsPolicies, accepted risks and exceptions, each with its sign-off and date.
- Everything recalculatesWhen a system's purpose changes or a requirement is closed, its risk level, its obligations and the indicators change too.
What you save when you drop spreadsheets
The reports are already done
System inventory, technical documentation and impact assessments, up to date and ready to download.
AI does the first pass
Before each deadline, the agent goes through the inventory, finds systems that are unclassified or lack evidence and prepares the plan. You just approve it.
What you do for the AI Act works for other standards
Inventory, risk management and human oversight are the foundation of ISO 42001 and the NIST AI RMF, and the personal data each model uses is already in your GDPR records. In GlobalSuite® you do it once and it counts for all of them.
Our own estimate of how much of each standard is covered: each requirement counts in full if it is covered the same way and half if only partly. Each standard adds its own requirements.
ISO 42001
NIST AI RMF
GDPR
Connected to the tools you already use
GlobalSuite® connects to your ecosystem via API. Data comes in on its own and nobody has to copy it by hand.
- Models and use casesfrom your data catalogue or MLOps platform
- Users and accessfrom Active Directory
- Plan actionsin your ticketing tool
- AI indicatorsin Power BI or your data lake
Active Directory
Identity
Ticketing
CMDB
Power BI
Monitoring
Vulnerabilities
Data lake
Power BI
Monitoring
Vulnerabilities
Data lake
GlobalSuite® GRC PlatformModules
The AI Act lives in the AI Governance module
And the module is part of the GRC platform. The systems, data and suppliers you register for the AI Act are the same ones used by ISO 42001, privacy and third-party risk.
If you already work with ISO 42001, the inventory and the assessments are already done.
Your goal: comply with the AI Act ahead of every deadline
Your team leads the way. GlobalSuite® automates your management system and, if you need it, our consultants support you at whichever step you choose.
If you want help, our consultants are:Lead Auditor ISO 42001AI governance specialists+2,000 projects
- Gap analysisYou know which AI systems you have, your role in each one and which risk level they fall into.
- ImplementationYou close the requirements for high-risk systems and the transparency obligations for limited-risk ones.
- Management system automationEvidence, approvals, reminders and indicators run on their own in GlobalSuite®.
- AssessmentYou go into the conformity assessment, or the authority's review, with the technical documentation ready.
Your AI, compliant with the RegulationAnd every new system comes in already classified, without starting from scratch.
What our customers have achieved
Rail transport · 14,000+ employees
As we rolled out risk management and compliance processes, and given the size of the company and the range of its activities, we needed software that would make risk management more effective and efficient.
Diego Molero AlonsoDirector of Internal Audit, Compliance and Business Risk · Renfe
- 5,000
- trains a day under its risk management system
- 100%
- of processes with an owner who keeps their risks up to date
Verified reviews on G2
Read all 105 reviewsIt reduces tool fragmentation and centralizes all evidence, documentation, controls, and assessments in one place.
Simple and focused on what matters. I implemented it in a large company (more than 30k employees across the world) in 2 months with the support of GlobalSuite consultants.
It is very easy to use, and when we have had a problem, the support people are very helpful. It is easy to implement.
Shall we look at it with your risks and your methodology?
Request a demo
AI Act FAQs
Can't find your question? Tell us about your case and we'll answer it with your situation in mind.
Tell us about your caseWhen does the AI Act apply?
Regulation (EU) 2024/1689 entered into force in August 2024 and applies in phases: the prohibitions from February 2025, the obligations for general-purpose AI models from August 2025, Annex III high-risk AI systems from December 2027 and AI embedded in Annex I regulated products from August 2028.
Who does it apply to?
Providers and deployers of AI systems in the EU, and also organisations outside the Union when the system's output is used within it. Importers and distributors have their own obligations.
What is a high-risk AI system?
One that can significantly affect people's safety or fundamental rights: for example, in employment, credit, education or critical infrastructure. It needs risk management, quality data, technical documentation, logs, human oversight and a conformity assessment.
What are the penalties?
Up to €35M or 7 % of worldwide annual turnover for prohibited practices, up to €15M or 3 % for breaching other obligations and up to €7.5M or 1 % for supplying incorrect information to the authorities.
Who supervises the AI Act?
Each Member State designates national market surveillance authorities to enforce it. The European AI Office, within the European Commission, supervises general-purpose AI models.
Does it replace the GDPR?
No. They complement each other: the GDPR regulates the processing of personal data and the AI Act regulates AI systems. Much of the data governance you already do for the GDPR also works for the AI Act.
Where does your
AI Act compliance stand?
Tell us what you need and we’ll show you how GlobalSuite® solves it.