Beyond answering questions, the Compliance Copilot now acts on your behalf — drafting Annex IV sections, populating compliance workspaces, scheduling regulatory deadlines and preparing approvals for you to sign. Every write action is gated by role-based permissions and recorded in the audit trail, with a new chat-vs-agent mode selector built into the composer.
The work you complete for the EU AI Act now automatically derives coverage for the NIST AI Risk Management Framework and ISO/IEC 42001, surfaced on a new multi-framework coverage page so you can see where you stand across all three at a glance.
A new read-only Model Context Protocol (MCP) server lets external AI agents query your compliance data, and a scoped public read API exposes your registered AI systems to your own tooling.
Bias datasets can now be re-tested on a schedule, with per-metric alert thresholds that notify you when a model drifts out of tolerance between formal assessments.
The Copilot now grounds every answer in the official text of Regulation (EU) 2024/1689 — 113 articles, 180 recitals and 13 annexes across all 24 EU languages — with verified, clickable citations, real-time streaming and a redesigned twin-panel console.
Serious-incident handling now includes a tamper-evident, hash-chained timeline, an evidence vault for Article 73 records, server-side official report PDFs and automatic deadline tiers — including the two-day clock for widespread incidents.
A new vendor risk suite tracks your third-party AI providers, links them to your systems under Article 25 obligations and keeps assessments in sync across the workspace.
Classify any AI system's risk tier for free, with no signup — enriched with the obligations and article references that apply — alongside a new resources hub and dedicated solutions pages.