Skip to content

Governance

Inventory & categorisation: what AI regulations require

Register of AI systems, categorisation, record of processing.

7 requirements · 6 regulations · 4 checks

Requirements by regulation

EUDORA1

DORA-08

Identification and inventory of ICT assets and functions Art. 8

USNIST AI RMF2

GOVERN-1.6

Mechanisms are in place to inventory AI systems and are resourced according to organizational risk priorities. GOVERN

MAP-2.1

The specific tasks and methods used to implement the tasks that the AI system will support are defined (e.g., classifiers, generative models, recommenders). MAP

USUS federal1

USF-02

Annual AI use case inventory M-25-21 §3(b)

BRPL 23381

BR-01

Preliminary assessment Arts. 12, 29

KRAI Basic Act1

KR-03

Self-assess whether the system is high-impact Art. 33

Checks in this theme

Most shared first

Code	Check	Used by
CHK-INVENTORY	A mechanism to inventory AI systems is in place and resourced	DORA RGPD NIST AI RMF US federal
CHK-CATEGORIZATION	AI system tasks and methods are categorized (classifier, generative, recommender)	AI Basic Act NIST AI RMF
CHK-BR-PRELIM	Preliminary assessment carried out and kept on record	PL 2338
NEW-GDPR-02	AI processing listed in the Art. 30 record	RGPD

Related themes

Governance & accountability Literacy & competence Risk management Quality & conformity

Run these requirements across all your AI systems

TrustFlow inventories your systems, qualifies them under each regulation and collects evidence once for every referential.