Every AI regulation, linked requirement by requirement

Name: TrustFlow AI regulatory atlas
Creator: TrustFlow

For each text: who is in scope, how to qualify an AI system, which requirements apply, how to prove them and by when. One check often serves several regulations: the atlas shows it.

Qualify

The AI system is classified under each text: risk level, role, automated decision, general-purpose model.

Make applicable

The verdict and the role determine which requirements apply, article by article.

Verify

Each requirement is proven by checks, often shared by several regulations.

25regulations and frameworks

16jurisdictions

251requirements

96 %of non AI Act requirements already covered by a shared check

The regulations

25 / 25

EURegulationPhasing in

AI Act

How to make an AI system compliant with the EU AI Act

33 requirementsNext Aug 2, 2027

EURegulationIn force

RGPD

How to make AI compliant with the GDPR

10 requirementsNext Jan 2027

UKPrinciplesIn force

UK principles

How the UK regulates AI

6 requirementsNext 2027

CoETreatyAdopted, not yet applicable

CoE Convention

What the Council of Europe AI Convention requires

5 requirementsNext 2027

EURegulationIn force

DORA

How to cover AI systems in your DORA compliance

6 requirementsNext —

EUDirectivePhasing in

NIS2

How to bring your AI systems into NIS2 compliance

4 requirementsNext —

EURegulationPhasing in

CRA

How an AI product complies with the Cyber Resilience Act

5 requirementsNext Dec 11, 2027

EUDirectiveAdopted, not yet applicable

PLD

Product liability: what changes for AI

4 requirementsNext Dec 9, 2026

USVoluntary frameworkVoluntary

NIST AI RMF

How to apply the NIST AI RMF to your AI systems

72 requirementsNext Dec 2026

COStatuteIn force

Colorado AI Act

How to comply with the Colorado AI Act (SB 24-205)

8 requirementsNext —

TXStatuteIn force

TRAIGA

How to comply with the Texas Responsible AI Governance Act

4 requirementsNext —

CAStatuteIn force

SB 53

What California SB 53 requires from frontier model developers

5 requirementsNext Jan 1, 2027

CAImplementing rulesPhasing in

CCPA ADMT

How to comply with the CCPA automated decision-making rules

4 requirementsNext Jan 1, 2027

NYCStatuteIn force

NYC LL 144

How to comply with NYC Local Law 144

3 requirementsNext —

ILStatuteIn force

IL HB 3773

Using AI in employment decisions in Illinois (HB 3773)

2 requirementsNext —

USExecutive policyIn force

US federal

What US federal AI policy requires

4 requirementsNext 2027

CANBillWithdrawn

Canada

AI regulation in Canada after AIDA was withdrawn

3 requirementsNext 2027

BRBillUnder discussion

PL 2338

Preparing for the Brazil AI Bill (PL 2338/2023)

20 requirementsNext Oct 2026

KRStatuteIn force

AI Basic Act

How to comply with the South Korea AI Basic Act

7 requirementsNext Jan 2027

JPStatuteIn force

AI Promotion Act

What Japan expects from businesses using AI

2 requirementsNext —

CNImplementing rulesIn force

China GenAI

How to comply with China's generative AI rules

6 requirementsNext 2027

SGVoluntary frameworkVoluntary

SG Agentic AI

How to govern AI agents under Singapore's framework

9 requirementsNext 2027

SGSupervisory guidelinesUnder discussion

MAS AI Guidelines

Preparing for the MAS AI risk management guidelines

11 requirementsNext Dec 2026

INTLCertifiable standardVoluntary

ISO 42001

How to prepare for ISO/IEC 42001 certification

13 requirementsNext Dec 2026

INTLPrinciplesVoluntary

OECD AI

Putting the OECD AI Principles into practice

5 requirementsNext —

Upcoming deadlines

after Sep 29, 2026

Oct 2026PL 2338 · Vote pushed past the October 2026 elections Dec 9, 2026PLD · Transposition and application to products placed on the market Dec 2026NIST AI RMF · Expected RMF revision Dec 2026ISO 42001 · CEN-CENELEC JTC 21 harmonised standards for the AI Act (prEN 18286 QMS)Dec 2026MAS AI Guidelines · Expected issuance of the final guidelines Jan 1, 2027SB 53 · First anonymised annual OES reports Jan 1, 2027CCPA ADMT · ADMT compliance required Jan 2027RGPD · Possible adoption of the Omnibus amendments

PastSet in the textPotentialTo verify

The most shared checks

number of regulations

System designed to allow human oversight (stop button, override)VER-008-0210

Fairness and bias are evaluated and results documentedCHK-BIAS10

Complete technical documentation compliant with Annex IVVER-005-018

Policies address third-party AI/data risks, incl. IP, transparency and testingCHK-THIRDPARTY-POL8

Documented data governance (collection process, bias, quality)VER-004-017

Documented and up-to-date risk registerVER-003-017

Accuracy and robustness verified and documentedVER-009-027

See the full crosswalk →

Run these requirements across all your AI systems

TrustFlow inventories your systems, qualifies them under each regulation and collects evidence once for every referential.

Request a demo