Regulation
20 resources in this section
Accredited Certification Body: where AI audit gains institutional credibility
Accredited certification bodies provide IAF MLA-recognized AI certification. Zertia is ANAB-accredited.
AI Audit: where AI systems prove what they claim to do
AI audit by accredited body verifies independence and compliance. Zertia is ANAB-accredited. Definición técnica An AI audit is a systematic, independent, d…
AI Compliance — Multi-Regulation Framework for AI Governance
Definición técnica AI compliance refers to the structured organizational practice of identifying, understanding, and meeting the legal, regulatory…
AI in Financial Services — Multi-Regulatory Compliance Framework
Definición técnica AI in financial services refers to the deployment of artificial intelligence systems across banking, insurance, investment management…
AI in HR — Employment AI Governance and EU AI Act High-Risk Obligations
Definición técnica AI in HR (Human Resources) refers to the deployment of artificial intelligence systems in employment-related processes — including…
AI Liability: where the burden of proof shifts toward AI providers
AI Liability Directive plus revised Product Liability Directive shift burden of proof toward providers. Zertia audits liability surface.
Automated Decision-Making: where AI decisions meet binding individual rights
Automated decision-making triggers GDPR Article 22 + EU AI Act Annex III. Zertia audits ADM systems with ISO 42001.
Biometric Identification — EU AI Act Classification and Obligations
Definición técnica Biometric identification in AI systems refers to the automated recognition of individuals based on their biological or behavioral…
CE Marking (AI) — EU Market Access Conformity Mark
Definición técnica CE marking (Conformité Européenne) is the regulatory conformity mark that indicates a product or system has been assessed and meets the…
EU AI Act
The dominant narrative presents the EU AI Act as "the world's first comprehensive AI law." It is a useful commercial description, but conceptually…
FRIA: where high-risk AI must prove it respects fundamental rights
FRIA requires fundamental rights assessment for high-risk AI under EU AI Act. Zertia integrates ISO 42005.
GDPR: where AI processing of personal data meets binding rights
GDPR Article 22 plus EU AI Act creates dual compliance pressure for AI. Zertia integrates ISO 27701 + ISO 42001 audit.
Global AI Red Lines: where international consensus attempts to draw limits
Global AI red lines emerged from Bletchley, Seoul and Paris summits. Zertia audits red-line compatibility under ISO 42001.
GPAI Model: where foundation model providers meet binding EU obligations
GPAI models face EU AI Act Articles 53-55 since August 2025. Zertia audits GPAI compliance with ISO 42001.
High-Risk AI System — EU AI Act Classification and Obligations
Definición técnica What is a high-risk AI system under the EU AI Act? Under the EU AI Act, a high-risk AI system is an AI system classified as…
Market Surveillance Authority — EU AI Act Enforcement Bodies
Definición técnica A Market Surveillance Authority (MSA) is the national regulatory body designated by each EU Member State to supervise and enforce the…
Profiling — AI-Based Individual Assessment and GDPR Obligations
Definición técnica Profiling is defined in GDPR Article 4(4) as any form of automated processing of personal data consisting of the use of that data to…
Prohibited AI Practices: where Article 5 draws the line for EU-bound systems
EU AI Act Article 5 prohibits eight AI practices with EUR 35M penalties. Zertia audits Article 5 compatibility under ISO 42001.
Regulatory Sandbox — Supervised AI Innovation Testing
Definición técnica A regulatory sandbox is a supervised, controlled environment established by a regulatory authority in which innovators can develop…
Right to Explanation — Individual AI Decision Rights under GDPR and EU AI Act
Definición técnica The right to explanation is the right of individuals to receive meaningful information about the logic, significance, and envisaged…
Need to apply this to your organization?
Talk to us. 30 minutes, no commercial pressure.