Back to home

Regulatory landscape

AI under regulation — what we actually help with.

We are practitioners, not official assessors. We help teams prepare AI systems for the European regulatory stack — by design, not after the fact.

Domains we operate in

01

AI Act readiness

Scope

Risk classification (Annex III), transparency (Art. 13), human oversight (Art. 14), technical documentation (Art. 11), testing & validation (Art. 15).

We offer

Gap analysis · Architecture review · Documentation templates · Risk-class assessment.

Application calendar

GPAI obligations: August 2026 · High-risk systems: August 2027.

02

ISO/IEC 42001 readiness

Scope

10 clauses of the AI Management System standard, aligned with your existing ISO 27001 / 9001 structure if present.

We offer

Pre-audit gap analysis · Implementation playbook · Statement of Applicability draft support · Internal audit preparation.

Status

Published 2023 · Certification offered by accredited bodies under COFRAC or equivalent.

03

NIS2 impact on AI pipelines

Scope

If you operate in one of the 18 critical sectors, ML/AI pipelines fall under NIS2 cybersecurity and incident-reporting obligations.

We offer

Impact mapping · Pipeline hardening · Incident reporting flow review · Supplier risk assessment.

Status

Transposition deadline passed (Oct 2024) · Enforcement ramping across Member States.

04

DORA operational resilience for AI

Scope

Financial services AI systems under ICT risk management (Art. 6), operational resilience testing (Art. 24), and ICT third-party risk (Art. 28).

We offer

AI-specific resilience assessment · Testing scenario design · Third-party AI risk mapping · Reporting template preparation.

Status

In force since January 2025 · Applies to regulated financial entities across the EU.

Important — scope of our work

TRARDI is not an official conformity assessment body. We provide readiness, gap analysis, and methodology alignment. Certification is issued by accredited bodies under COFRAC or equivalent European schemes.

Ready to assess?

Book a regulatory readiness call.

30 minutes to map which obligations apply to your AI systems, what's already in place, and what needs to be addressed before deadlines.

Book a readiness call