For companies that use AI
Know what applies.
Show the evidence.
A deadline tracker with a source on every row, four free tools that do the first hour of compliance work, a verified directory of who can help, and the documents an inspector actually asks for. Built from the primary legal texts of eight laws in four jurisdictions.
Run the readiness scan See the Compliance Kit
What applies to you? 10-second version
Pick at least one region and one use.
- EU AI ActRegulation (EU) 2024/1689
- Digital Omnibus on AIRegulation (EU) 2026/1744
- Polish AI Systems Actin force 11 Aug 2026
- Korea AI Basic Actin force 22 Jan 2026
- Colorado SB 26-189from 1 Jan 2027
- California ADMT rulesfrom 1 Jan 2027
- Texas TRAIGAHB 149, 1 Jan 2026
- Utah AI Policy ActSB 149
| In | Obligation | Status |
|---|---|---|
| 36days · 28 Oct 2026 | KRiBSI inspections and fines begin Poland · Ustawa o systemach sztucznej inteligencji | Upcoming |
| 71days · 2 Dec 2026 | Machine-readable marking of generative AI output EU · EU AI Act as amended by Reg. 2026/1744 | Upcoming |
| 101days · 1 Jan 2027 | Colorado ADMT duties begin US, Colorado · SB 26-189 (Automated Decision-Making Technology) | Upcoming |
| 101days · 1 Jan 2027 | ADMT significant-decision obligations US, California · CPPA automated decision-making regulations | Upcoming |
Two ways in
The same facts, packaged for the two people who carry AI compliance in practice.
For companies that use AI
From "we use ChatGPT, is that a problem?" to a folder an inspector can open
Operations, IT and compliance leads at companies with 20 to 500 staff.
- Find out what applies in three minutes
- Inventory, policy, disclosures, training, vendor checks, incident procedure
- Evidence an inspector, customer or insurer can read
For advisors, DPOs and law firms
Reusable documents and a place to be found
Consultants, data protection officers and lawyers serving several clients.
- Advisor licence: the kit for up to ten client companies, with your branding
- A free, verified listing in the directory; featured placement if you want to be first
- Weekly digest of what moved, with sources you can forward
Everything you need, nothing you have to read first
Six things. Each is useful on its own; together they take a company from first question to evidence.
Deadline tracker
Every obligation with date, status, who it applies to, the evidence expected and a source. Updated when the law moves, not when a blog does.
Readiness scan
Twelve questions. Which obligations apply, a 0–100 evidence score, and the five things to do first.
Disclosure generator
Article 50 texts, ready to paste.
Fine calculator
Three tiers, SME rule applied.
Verified directory
60 vendors from 17 countries, each checked on its own site.
AI Compliance Kit
Sixteen documents and seven spreadsheets that produce the evidence, with ISO/IEC 42001 and NIS2 mappings. DOCX, XLSX, Markdown. $149 for founding customers.
What changed in 2026, on one line
The Digital Omnibus deferred the high-risk rules to 2027 and 2028. Everything that hits an ordinary AI user is still on the calendar.
- 1 Jan 2026US, Texas
- 1 Jan 2026US, California
- 22 Jan 2026South Korea
- 27 Mar 2026US, New York
- 21 Jul 2026South Korea
- 2 Aug 2026EU
- 2 Aug 2026US, California
- 11 Aug 2026Poland
- 28 Oct 2026Poland
- 2 Dec 2026EU
- 1 Jan 2027US, Colorado
- 1 Jan 2027US, California
- 1 Jan 2027US, California
- 22 Jan 2027South Korea
- 2 Dec 2027EU
- 2 Aug 2028EU
Three steps from "we use AI" to evidence
The order matters. Everything hangs off the inventory.
Scan
Find out which obligations apply and what you can already show. Three minutes, no account.
Document
Build the inventory, roll out the policy, put the disclosures in place, train staff, question your vendors.
Prove
Keep a document index, a named contact and a review date. When the letter arrives, you have seven days and a folder.
Why you can rely on it
Trust in a compliance product comes from method, not badges. This is ours, and each claim links to where you can check it.
A source on every fact
Deadlines link to the legal text or a named law-firm briefing. Listings link to the page they were verified against.
See the tracker →Dated and re-verified
Deadlines weekly, listings quarterly, guides on their review date, the kit every quarter with a changelog.
Read the method →Tools run in your browser
The scan, the generator and the calculator store nothing and send nothing. There is no account to create.
Privacy notice →Money never changes content
Featured placements are labelled and sit in a separate slot. Listings, rankings and guides are not for sale.
How placements work →Written from the law, marked for counsel
Every kit document cites its sources and flags the points a lawyer should confirm. Version 1.0 flags 32 of them.
Read the free sample →Mapped to ISO/IEC 42001 and NIS2
Kit documents 14 and 15 map all 38 Annex A controls and the ten Article 21 measures to the kit, and mark each one covered, partial or not covered. Our analysis, not a certificate.
See the mappings →Operated from the EU
Dutybound is run by [Your company legal name] in Poland and subject to the same rules it tracks.
Who runs it →Certification status: Not certified. We are preparing our own operation for ISO/IEC 42001 certification by an accredited body and will publish the certificate here when it is issued. Scope in preparation: the research, verification, publication and update processes behind Dutybound, including the AI agent routines. Read the plan. We hold no ISO, SOC 2 or NIS2 certificate today and show no certification marks until one is issued.
Founding customers · version 1.0
Fifty founding licences, then the price goes up
The kit is new. The first fifty companies get it at the founding price, keep updates for life instead of twelve months, and shape version 1.1 with their feedback. In return we may ask, and only ask, to name you as a founding customer.
- All 14 documents and 5 spreadsheets, DOCX, XLSX and Markdown
- Lifetime updates with a changelog
- A direct line for correction requests
- Optional listing as a founding customer, with your permission
- One company, unlimited internal users
- 14-day refund if not downloaded
- VAT handled at checkout
Advisor licence for consultancies and DPOs: $499, up to ten client companies. Details
Questions people ask before they trust a site like this
Is this legal advice?
No. Everything here is operational guidance written from the legal texts and named law-firm briefings cited on each page. The kit marks every point a lawyer should look at. We are not a law firm.
How do you keep the deadlines right?
Each row links to its source. The tracker is re-checked weekly against the EU AI Office, national supervisors and law-firm updates, and every change is logged with a date and a source.
Are you certified by anyone?
Not yet, and we say so above. Certification bodies assess organisations, not document templates. We are preparing our own operation for ISO/IEC 42001 certification by an accredited body; the plan is public and the certificate will appear on the About page when issued. Until then, what you can check is the source behind every fact and the review date on every page.
Are directory listings paid?
Listings are free and written by us from the company's own site. Featured placements are paid, labelled, and change position only, never the text.
We are outside the EU. Why would this matter?
If you have EU users or customers, the AI Act reaches you. Korea's AI Basic Act and the US state laws are on the tracker too, with their own rows in the kit's mapping and their own disclosure texts.
What moved this week, and one thing to do
One email every Tuesday: tracker changes with sources, new verified listings, one concrete action. No sponsor until there is something worth sponsoring, and then it is labelled.