For companies that use AI

Know what applies.
Show the evidence.

A deadline tracker with a source on every row, four free tools that do the first hour of compliance work, a verified directory of who can help, and the documents an inspector actually asks for. Built from the primary legal texts of eight laws in four jurisdictions.

Run the readiness scan See the Compliance Kit

No account, nothing storedEvery fact cited and datedRe-verified weeklyNot legal advice, by design

What applies to you? 10-second version

Where do you operate or sell?
How do you use AI?

Pick at least one region and one use.

Built from the primary texts of

What applies where: EU, Poland, South Korea, United States →

dutybound · deadlines · re-verified weekly
InObligationWhoStatus
23days · 28 Oct 2026KRiBSI inspections and fines begin
Poland · Ustawa o systemach sztucznej inteligencji
Companies and public bodies operating in PolandUpcoming
58days · 2 Dec 2026Machine-readable marking of generative AI output
EU · EU AI Act as amended by Reg. 2026/1744
Providers of generative AI systems and, in practice, companies publishing generated contentUpcoming
88days · 1 Jan 2027Frontier-model developer duties
US, New York · RAISE Act (as amended 27 March 2026)
Developers of frontier AI models only (trained with more than 10^26 operations); stricter duties for large frontier developers with annual revenue above $500 millionUpcoming
88days · 1 Jan 2027Colorado ADMT duties begin
US, Colorado · SB 26-189 (Automated Decision-Making Technology)
Developers and deployers of automated decision-making technology affecting Colorado consumersUpcoming
20 obligations across 4 jurisdictions, each with its source.Full tracker · JSON feed
20obligations tracked, each with a source
4jurisdictions: EU, Poland, South Korea, US states
88vendors verified against their own sites
105files in the kit, in English and Polish, incl. ISO 42001 and NIS2 mappings

Two ways in

The same facts, packaged for the two people who carry AI compliance in practice.

For companies that use AI

From "we use ChatGPT, is that a problem?" to a folder an inspector can open

Operations, IT and compliance leads at companies with 20 to 500 staff.

  • Find out what applies in three minutes
  • Inventory, policy, disclosures, training, vendor checks, incident procedure
  • Evidence an inspector, customer or insurer can read

Start with the scanKit, single licence

For advisors, DPOs and law firms

Reusable documents and a place to be found

Consultants, data protection officers and lawyers serving several clients.

  • Advisor licence: the kit for up to ten client companies, with your branding
  • A free, verified listing in the directory; featured placement if you want to be first
  • Weekly digest of what moved, with sources you can forward

Advisor licenceList your practice

Everything you need, nothing you have to read first

Six things. Each is useful on its own; together they take a company from first question to evidence.

What changed in 2026, on one line

The Digital Omnibus deferred the high-risk rules to 2027 and 2028. Everything that hits an ordinary AI user is still on the calendar.

Read the full breakdown with sources →

Three steps from "we use AI" to evidence

The order matters. Everything hangs off the inventory.

1

Scan

Find out which obligations apply and what you can already show. Three minutes, no account.

score 0–100 · obligations · next 5 actions

Run the scan →

2

Document

Build the inventory, roll out the policy, put the disclosures in place, train staff, question your vendors.

inventory.xlsx · policy.docx · disclosures · training-register.xlsx

Get the kit →

3

Prove

Keep a document index, a named contact and a review date. When the letter arrives, you have seven days and a folder.

inspection-protocol.docx · jurisdiction-mapping.xlsx

Read the guides →

Why you can rely on it

Trust in a compliance product comes from method, not badges. This is ours, and each claim links to where you can check it.

A source on every fact

Deadlines link to the legal text or a named law-firm briefing. Listings link to the page they were verified against.

See the tracker →

Dated and re-verified

Deadlines weekly, listings quarterly, guides on their review date, the kit every quarter with a changelog.

Read the method →

Tools run in your browser

The scan, the generator and the calculator store nothing and send nothing. There is no account to create.

Privacy notice →

Money never changes content

Featured placements are labelled and sit in a separate slot. Listings, rankings and guides are not for sale.

How placements work →

Written from the law, marked for counsel

Every kit document cites its sources and flags the points a lawyer should confirm. Version 1.5 flags 35 of them.

Read the free sample →

Mapped to ISO/IEC 42001 and NIS2

Kit documents 14 and 15 map all 38 Annex A controls and the ten Article 21 measures to the kit, and mark each one covered, partial or not covered. Our analysis, not a certificate.

See the mappings →

Operated from the EU

Dutybound is run by ARATIR SYSTEMS PROSTA SPÓŁKA AKCYJNA in Poland and subject to the same rules it tracks.

Who runs it →

Certification status: Not certified. We are preparing our own operation for ISO/IEC 42001 certification by an accredited body and will publish the certificate here when it is issued. Scope in preparation: the research, verification, publication and update processes behind Dutybound, including the AI agent routines. The route and our progress. We hold no ISO, SOC 2 or NIS2 certificate today and show no certification marks until one is issued.

Founding customers · version 1.5

Fifty founding licences, then the price goes up

The kit is new. The first fifty companies get it at the founding price, with quarterly updates for twelve months, and shape the next versions with their feedback. In return we may ask, and only ask, to name you as a founding customer.

  • All 16 documents, 7 spreadsheets and a ready-to-run AI literacy training (slide decks with speaker notes), in English and Polish
  • Quarterly updates for 12 months, with a changelog
  • A direct line for correction requests
  • Optional listing as a founding customer, with your permission
$149 one-time
$199 after the first fifty
  • One company, unlimited internal users
  • 14-day refund if not downloaded
  • Pay in USD, EUR or złoty
Get the founding licence

Advisor licence for consultancies and DPOs: $499, up to ten client companies. Details

Questions people ask before they trust a site like this

Is this legal advice?

No. Everything here is operational guidance written from the legal texts and named law-firm briefings cited on each page. The kit marks every point a lawyer should look at. We are not a law firm.

How do you keep the deadlines right?

Each row links to its source. The tracker is re-checked weekly against the EU AI Office, national supervisors and law-firm updates, and every change is logged with a date and a source.

Are you certified by anyone?

Not yet, and we say so above. Certification bodies assess organisations, not document templates. We are preparing our own operation for ISO/IEC 42001 certification by an accredited body; the plan is public and the certificate will appear on the About page when issued. Until then, what you can check is the source behind every fact and the review date on every page.

Are directory listings paid?

Listings are free and written by us from the company's own site. Featured placements are paid, labelled, and change position only, never the text.

We are outside the EU. Why would this matter?

If you have EU users or customers, the AI Act reaches you. Korea's AI Basic Act and the US state laws are on the tracker too, with their own rows in the kit's mapping and their own disclosure texts.

Get an email before each date

One email 30 days and one 7 days before each date in the markets you tick, with who it applies to and what to have ready. Next: Machine-readable marking of generative AI output, 2 Dec 2026.