01 · AI Use-Case & Inventory
Declare once. Everything follows.
Every AI initiative enters through a single intake dual-screened against the DTA impact tiers and the EU AI Act. One approval seeds a draft risk, opens the exact obligations, and creates the governed inventory record. In the same moment.
wahid · Intake

ZOOM IN
In the demothe live governance-gate preview the verdict updates as each intake field is completed.
02 · Risk, Controls & Incidents
Every number has one owner.
The flagship enterprise risk engine. Risk owns ratings and the acceptance chain everyone else reads them live. Change a residual rating and it updates everywhere it appears. A degraded control or a linked incident voids the acceptance automatically.
wahid · Risk

ZOOM IN
In the demothe 5×5 appetite map beyond-appetite risks ringed red, each named with an owner and a next step.
03 · Compliance
What's required and is it met.
Obligations derive from intake answers never re-keyed. Each moves Open → In Progress → Evidenced → Met, with an owner and a citation. Blocking obligations gate an AI system's go-live until satisfied. Regimes switch on and off per tenant.
wahid · Compliance

ZOOM IN
In the demo236 obligations across 14 regimes, three views of one worklist and a compliance gap raising a risk directly into the register.
04 · Third-Party Risk
The same rigour for someone else's model.
Vendors behind your AI are tiered on two axes how much you depend on them, against what they can touch. The tier drives due-diligence depth, contract protections and monitoring intensity. A sanctions, adverse-media or cyber signal fires a reassessment automatically.
wahid · Third-Party

ZOOM IN
In the democoncentration and fourth-party exposure surfacing early and a failing vendor re-tiered without waiting for the annual cycle.
05 · AI Maturity & the Board
Benchmark it. Then prove it.
Governance maturity assessed across ten domains on a 0–4 scale, with ISO 42001 and EU AI Act add-ons rolled into one portfolio index, heatmap and remediation roadmap. Executives read six live lenses; every one exports to a board pack.
wahid · Maturity & Board

ZOOM IN
In the demoappetite breaches, expiring acceptances and blocking obligations surfacing automatically no manual exports, ever.