Automatic mapping
Inventory your AI systems — internal, third-party, embedded. Catch Shadow AI before regulators and auditors do. Live map updated as your stack evolves.
The dispositif
AI compliance delivered. Not a tool to interpret.
Platform + Lawyer Console + à-la-carte expert services. You no longer look for who validates your documents, who defends you in case of audit, who runs your DPIA without an in-house DPO — it's in the offer.
Platform · Lawyer Console · À-la-carte expert services
The platform in practice
Four operational deliverables, one subscription.
ACF Compliance turns the AI governance spec sheet into something your DPO, your CISO and your board can actually use.
Multi-regulator classification
Each system classified against the EU AI Act, GDPR, DORA, NIS2, ISO 42001 and 13 AI jurisdictions (EU, UK, US, Canada, Brazil, Switzerland, Japan...). You see what applies where, subsidiary by subsidiary.
Ready-to-submit documentation
AI policy, DPIA, high-risk system registry, Article 49 register, vendor clauses, due-diligence — generated, versioned and signed. Audit-ready.
Lawyer Console
Your law firm — or an ACF partner firm — accesses your file from the console: enforceable legal opinion, contractual structuring, negotiation, defence in case of audit or litigation. ACF never takes any fees: RIN-compatible model.
Platform
Three capabilities, one standard of rigour
From automatic discovery of tools to cryptographic proof of every action — every layer is built to hold up under regulatory scrutiny.
AI Inventory
Mes systèmes IA
Inventaire et classification de votre stack IA
NomClassificationMis à jour
Chatbot service client (ChatGPT-4o)
eu_ai_act
RISQUE LIMITÉ (Art. 50)
05/06/202684/100 — Bonne confiance
Classifier catalogue produits
eu_ai_act
RISQUE MINIMAL (Art. 95)
18/05/202692/100 — Haute confiance
Moteur de recommandation produits
eu_ai_act
RISQUE LIMITÉ (Art. 50)
09/06/202678/100 — Bonne confiance
Détection de fraude paiement
eu_ai_act
HAUT RISQUE (Annexe III)
13/06/202681/100 — Bonne confiance
6 systèmes inventoriés · 1 haut risque+ Nouveau système
Automatic inventory of AI tools deployed in your stack
No more chasing teams to find out what is deployed. The platform scans your environment on demand and keeps the registry up to date.
- SSO connectors for Google Workspace and Microsoft 365: pulls activated apps
- Browser probes (enterprise extension): detects tools opened via the web
- Detection of the main AI tools on the market: ChatGPT, Claude, Gemini, Mistral, Copilot, internal agents, custom RAGs — registry continuously extended
- Automatic dedup and merge for a clean registry
- Shadow AI tagging: any undeclared tool shows up in the table
GDPR Art. 6, 9 and 49 documentation prepared for your team
AI policy, DPIA, Art. 49 register, transparency notices: generated from your inventory, scoped to the right jurisdiction, in under 30 minutes.
- Coverage of Art. 6 (lawful basis), Art. 9 (special categories), Art. 49 (non-EU transfers)
- Lawyer-vetted ACF Standard templates that take CNIL and EDPB guidance into account
- PDF and DOCX export, integrated e-signature
- Versioning: every change is tracked and timestamped
- Multi-jurisdiction: automatic adaptation EU / UK / US / CA / BR / CH / JP
Documents
AIPD, registres, politiques — générés depuis votre inventaire
DocumentTypeStatusGénéré le
AIPD — Détection de fraude paiement
aipd🔒 verrouillé03 mai 2026AIPD — Moteur de recommandation produits
aipd🔒 verrouillé20 mai 2026Registre des traitements RGPD Art. 30
registre_art30🔒 verrouillé02 juin 2026Politique IA interne (Art. 4 AI Act)
ai_policy✏ brouillon11 juin 2026Export par document :
PDF·DOCX
Decision Engine
Journal d'audit cryptographique
Toutes vos décisions de conformité, hachées et signées. Vérifiable en 1 clic.
✓ Vérifier intégrité↓ Exporter PDF certifié
DateActionHash chaîneSignature
11 juin 2026, 22:43a84dcf46302c02...● Signé Ed25519
Document généré
Documents
07 juin 2026, 22:43df9d450eb225f3...● Signé Ed25519
Document verrouillé
Documents
03 juin 2026, 22:439f1e868480e75e...● Signé Ed25519
Création
Systèmes IA
28 mai 2026, 22:43d619e5d7bcc246...● Signé Ed25519
Document verrouillé
Documents
Hash chain SHA-256 + signature Ed25519. Vérifiable indépendamment d'ACF.
Ed25519 audit chain, designed to be admissible under scrutiny (art. 1362 and 1366)
Every event (classification, validation, modification, export) is hashed and signed. The cryptographic chain is verifiable independently — your asset #1.
- SHA-256 hash chain: integrity of the event sequence
- Ed25519 signature per event, key specific to your organisation
- Standalone verification: a third party (auditor, judge, authority) can validate the chain with your public key, without the platform
- Certified signed PDF export downloadable from the dashboard
- Ed25519-signed timestamp
The journey
How it works
From diagnostic to action plan, in 4 steps.
- 1
Step 1
You run the diagnostic
8 questions, 3 minutes. You leave with a first score and your top 3 priorities — no signup.
- 2
Step 2
You map your AI systems
Scan repos, SaaS exports, or enter manually. Automatic EU AI Act classification with a confidence level.
- 3
Step 3
You document in one click
The platform generates the required documents. Every artifact is timestamped and signed so it counts as defensible technical evidence (subject to the court's appreciation).
- 4
Step 4
You escalate if needed
3-click submission to a partner law firm. Custom quote, direct payment to the firm.
What sets us apart
5 reasons ACF holds where other SaaS bends
Not marketing — code, a cryptographic signature you can verify yourself, and a law firm network. Verifiable on our detailed coverage page.
Our #1 moat
Independently verifiable crypto audit trail — without us
Every AI decision is SHA-256 hashed, Ed25519 signed, chained into a tamper-proof structure and exported as a certified signed PDF. An auditor, judge or regulator verifies your audit trail with any standard Ed25519 verification tool — without installing ACF® or calling us. Ed25519-signed timestamp. Most GRC tools ship an evidence store; ACF ships technical proof designed to be admissible (Civil Code art. 1362 and 1366, subject to the court's appreciation).
Ed25519SHA-256RFC 3161PDF certifié
AI Act-native (not an add-on)
US compliance automation leaders resell an AI Act module mounted on their SOC 2 / ISO 42001 engine. ACF hardcodes AI Act articles 5, 27, 50 + GPAI obligations (art. 53-55) + FRIA art. 27 directly into its engine, with the consolidated post-Digital Omnibus timeline (enforcement Aug 2026, Annex III Dec 2027, Annex I Aug 2028). No ISO 42001 cross-mapping: the real obligation, article by article.
Included in every plan
RIN-compatible Lawyer Console
Compliance platform architecture compatible with the French Bar Association rules (Articles 11.3 / 11.4 RIN). You click "I need an AI Act lawyer" — the request is routed to our partner network, currently being built across European jurisdictions.
Included in every plan
3 cores in depth + 12 transverse frameworks + 13 AI jurisdictions
Three cores coded in depth in the ACF engine today: GDPR (EU Regulation 2016/679), AI Act (EU Regulation 2024/1689, articles 5/27/50 + GPAI + FRIA) and ISO 42001 (AIMS). Every article mapped, D1-D6 scoring wired, Ed25519 audit trail tailored. 12 transverse frameworks mapped: DORA, NIS2, ISO 27001/27701, LGPD, CCPA-CPRA, PIPEDA, CRA, APPI, ISO 23894/42005/5338. Plus 13 non-EU AI jurisdictions (UK, US-Fed/CO/CA/NY, CA, BR, CH, JP, CN, KR, AU, IN) mapped and usable today in the multi-jurisdiction engine. Narrow and deep beats wide and shallow.
Included in every plan
AI Act art. 14 human oversight — every AI decision traced and signed
AI Act art. 14 demands effective human oversight. Other SaaS audit POST-execution and ship logs after the fact, hard to defend. ACF records every classification, validation and escalation in an Ed25519 + SHA-256 signed chain, independently verifiable, designed to demonstrate due diligence in a CNIL or AI Office inspection.
Included in every plan
Comparison
Why AI Act-native beats ISO 42001 cross-mapping
Synthetic comparison vs three competing approaches (without naming vendors publicly).
| Criterion | ACF Compliance | US compliance leaders | French GDPR specialists | Consulting + Excel |
|---|---|---|---|---|
| AI Act art. 5/27/50 + GPAI + FRIA hardcoded (not an ISO 42001 cross-mapping) | ||||
| Independently verifiable crypto audit trail (Ed25519 + SHA-256) — third-party verifiable signature | ||||
| RIN-compatible Lawyer Console architecture (partner network rolling out) | ||||
| 3 cores in depth (GDPR, AI Act, ISO 42001) + 12 transverse frameworks mapped + 13 AI jurisdictions | ||||
| EU sovereign hosting (no CLOUD Act exposure) |
Natively coveredPartial or via cross-mappingNot covered
Sources: product audit of the top 5 AI / GDPR compliance SaaS, May 2026. Detailed table available on the product page.