AI Governance · ISO 42001 · EU AI Act

How Intelego
lives compliance.

We run our own IT to the same standards we implement for customers: EU AI Act-compliant, ISO 42001, GDPR — demonstrable, not just claimed.

✓ ISO 42001 — 82% PASS ✓ EU AI Act — Limited Risk ✓ GDPR — Compliant ✓ NIST AI RMF — 75%
OWASP AI Top 10 — In progress (Q3 2026)
Standard
ISO 42001:2023
AI management system — PASS (threshold: 80%). 53 controls implemented, quarterly management review, complete audit trail.
Compliance82%
🇪🇺
Regulation
EU AI Act 2024
Limited Risk classification. Art. 4 organisational competence (mandatory since 02.02.2025), Art. 14 human oversight via 17 controlled release gates.
Status✓ Compliant
Data protection
GDPR / DSGVO
EU-only data storage (Hetzner DE/FI). Art. 28 DPA template for tenants. 72h breach-notification procedure implemented.
Status✓ Compliant
Framework
NIST AI RMF 1.0
GOVERN, MAP, MEASURE (partial), MANAGE. AI system inventory, risk register, bias-fairness framework in place.
Compliance75%
Every measure documented. Auditable at any time.

No compliance theatre — every control is machine-readable and publicly viewable.
Auditors receive complete evidence packages. No surprises.

Compliance details

82%

ISO 42001:2023

AI management system — PASS (threshold: 80%). 53 controls implemented, quarterly management review, complete audit trail.

✓

EU AI Act 2024

Limited Risk classification. Art. 4 organisational competence (mandatory since 02.02.2025), Art. 14 human oversight via 17 controlled release gates.

✓

GDPR / DSGVO

EU-only data storage (Hetzner DE/FI). Art. 28 DPA template for tenants. 72h breach-notification procedure implemented.

75%

NIST AI RMF 1.0

GOVERN, MAP, MEASURE (partial), MANAGE. AI system inventory, risk register, bias-fairness framework in place.

17

Controlled release gates

No AI agent writes to production without explicit approval. Deterministic control — not a probabilistic guardrail.

Apache 2.0

Open source

All compliance templates openly available. Risk register, release-gate definitions, DPA template: github.com/iio-space

Intelego does not treat compliance as a checkbox. Every control is evidence-backed, automatically monitored and machine-readably documented. No one-off snapshots — continuous verification. Our governance artifacts are Apache-2.0-licensed and publicly viewable on GitHub.

Intelego Compliance — EU AI Act, ISO 42001, DSGVO
 Start with compliance

IT operations with built-in governance.

The complete technical compliance documentation with evidence trail and machine-readable proof is available at iio.space.

IBO — IT operations with governance → Full evidence at iio.space →