Understand your AI risks, identify applicable requirements and manage governance documentation in one self-serve platform. Starting with the EU AI Act.
Built for SMEs · No experts needed · From €49/month
From understanding your AI risks to managing governance requirements, all in one place.
Every AI system you build or use, with its risk level.
What the rules ask of each system, and what is still open.
Structured records to support compliance and customer due diligence.
Illustrative examples.
Coming next: monitoring and reassessment as requirements and AI systems evolve.
Guided workflows designed for businesses without dedicated compliance teams.
Map the AI systems you build or use, and see which requirements apply to each one.
Classify the risk of each AI system and identify your governance gaps.
Create structured documentation to support your compliance efforts and customer due diligence.
For SMEs in any sector. Common use cases include:
Understand the requirements relevant to AI used in recruitment, candidate screening and workforce management.
Learn more →Assess governance requirements for AI applications in areas such as creditworthiness and financial decision-making.
Learn more →Identify the AI systems used across your business and understand the governance responsibilities that may apply.
Learn more →Accessible, structured and affordable.
Not a simplified version of enterprise software. Designed for smaller organisations with limited compliance resources.
Not one checklist inside a general compliance tool. Aurora Trust is built around understanding and governing AI systems.
Requirements are translated into structured assessments and documentation workflows, not just information about the law.
Start on your own, at your own pace, with plans from €49 a month.
Aurora Trust combines expertise in AI governance, technology development and international business to make responsible AI practice accessible to SMEs.
A team with backgrounds in AI governance, public policy and technology ecosystems.
Active in AI governance research and standards-related initiatives.
Experience across European and international technology markets. Born in Stockholm, built in Amsterdam, powered in Wrocław.
AI governance is how a business keeps track of the AI it builds or uses: which AI systems it has, what risks they carry, which rules apply, who is responsible and what documentation it keeps. It turns responsible AI practice, and compliance with laws such as the EU AI Act, into a repeatable process.
If you develop, sell or use AI in the EU, it is likely to apply in some form. What it requires depends on each AI system's intended purpose and your role as provider or deployer. Many everyday AI tools carry limited obligations, while systems used in areas such as recruitment or creditworthiness assessment can be classified as high-risk. The first step is to map your AI systems and classify each one.
You describe each AI system through guided questions. Aurora Trust classifies its risk under the EU AI Act, identifies the requirements relevant to it and helps you create structured governance documentation, such as technical documentation and risk records, to support your compliance efforts and customer due diligence.
No coding or dedicated compliance team is required to get started. The platform uses guided questions in plain language. For complex or high-stakes decisions, we recommend reviewing the outcome with qualified legal counsel.
No. Aurora Trust helps you identify requirements and manage governance documentation, but it does not provide legal advice or guarantee compliance. For decisions that need legal judgement, consult qualified legal counsel.
More detail in our EU AI Act guide, the guide to customer AI questionnaires and the blog.
Take the first step towards
better AI governance
One platform to identify, assess and document your AI systems. Starting with the EU AI Act.
Every AI system you build or use, with its risk level.
What the rules ask of each system, and what is still open.
Structured records to support compliance and customer due diligence.
Illustrative examples.
Understand how each of your AI systems is classified under the EU AI Act.
LiveIdentify the regulatory obligations relevant to each AI system.
LiveCreate and organise structured records to support your governance processes.
LiveTrack changes to requirements and reassess AI systems as they evolve.
Coming nextAnswer guided questions about what the system does, who uses it and where. No expertise needed.
Get the risk classification and the requirements relevant to each AI system.
See what is in place and what still needs attention.
Create structured documentation to support your compliance efforts, internal governance and customer due diligence.
Illustrative. Classification depends on each system's intended purpose and context.
Ready to see how Aurora Trust
classifies your AI?
For SMEs in any sector, with common use cases below. Whether an AI system is high-risk depends on its intended purpose and context, so each system is assessed on its own.
AI used to filter applications, rank candidates or evaluate interviews can fall under the EU AI Act's high-risk category. Understand the requirements and document how the system is governed.
Tools that support decisions on promotion, task allocation or performance monitoring may also carry specific obligations. Map them before your customers ask.
AI used to assess creditworthiness or set credit scores for individuals can be classified as high-risk. Assess the requirements that apply to your model.
AI used in risk assessment and pricing for life and health insurance can also be high-risk. Other uses, such as fraud detection, follow different rules.
Businesses using AI tools have responsibilities too, from AI literacy to transparency. Start with a clear inventory of the AI you use.
Chatbots and AI-generated content carry transparency obligations. Identify where they apply and how to meet them.
Not sure where your
AI systems stand?
The EU AI Act is the world's first comprehensive binding AI law, and it is already in force. Transparency obligations have applied since August 2026, a new prohibition applies from December 2026, and high-risk obligations apply from 2 December 2027. Last reviewed 28 October 2026.
European Commission publishes the first draft of the AI Act proposing a risk-based regulatory framework, the first of its kind globally.
Passed 523 in favour. World's first horizontal AI law. Final text agreed after extensive negotiations over General-Purpose AI model rules.
Entered into force 1 August 2024. EU AI Office established. Foundational definitions and framework apply immediately.
Outright prohibition of manipulative AI, real-time biometric surveillance in public, and social scoring systems. AI literacy obligations (Article 4) begin.
GPAI and foundation model providers must comply: technical documentation, transparency, copyright compliance, and systemic-risk mitigations. EU AI Board, Scientific Panel, and Advisory Forum are operational.
Article 50 transparency and synthetic-content watermarking obligations apply (grace period to December 2026 for systems already on the market). Annex III high-risk obligations were originally due on this date but were deferred to December 2027 under the confirmed EU Digital Omnibus.
A new Article 5 prohibition on AI systems generating child sexual abuse material and non-consensual intimate imagery applies, carrying penalties up to €35M or 7% of global turnover.
Member States must have AI regulatory sandboxes operational. (Annex I high-risk obligations, originally due on this date, were deferred to August 2028, confirmed law.)
Under the confirmed EU Digital Omnibus, standalone high-risk AI systems (employment, credit scoring, biometrics, education, law enforcement, critical infrastructure) must be fully compliant. Annex I product-embedded AI follows in August 2028.
AI components in large-scale EU IT systems must be fully compliant. Commission evaluates the functioning of the Act.
Note: The EU Digital Omnibus (Regulation (EU) 2026/1744), deferring Annex III high-risk obligations to 2 December 2027 and Annex I to 2 August 2028, was approved by Parliament (16 June 2026) and Council (29 June 2026), published in the Official Journal on 24 July 2026, and entered into force on 27 July 2026 - the new dates are confirmed law. Transparency obligations and the new December 2026 prohibition are not deferred.
Know your obligations.
Start governing your AI today.
Plans for SMEs, from €49 a month. Every plan includes AI risk classification, requirements mapping and governance documentation.
Aurora Trust supports your governance and compliance efforts. It does not provide legal advice. Review with qualified legal counsel where appropriate.
Not a simplified version of enterprise software. Designed for smaller organisations with limited compliance resources.
Not one checklist inside a general compliance tool. Aurora Trust is built around understanding and governing AI systems.
Requirements are translated into structured assessments and documentation workflows, not just information about the law.
Start on your own, at your own pace, with plans from €49 a month.
Take the first step towards
better AI governance
Tell us a little about your business and the AI you build or use. We will get back to you within two business days.
Fill in the form and we will be in touch to discuss your situation and how Aurora Trust can help.
We will respond within two business days.