Open framework for AI governance. Registry, risk classification, assessments, human oversight and incident management, mapped across nine frameworks: the EU AI Act, the GDPR, NIST AI RMF, ISO 42001, AIUC-1 (the certification standard for AI agents) and the California, Colorado, Texas and Washington AI rules.
AI system inventory, risk classification, impact assessments, human oversight and incidents. Ready to fly in a few minutes.
Maintain a living inventory of every AI system, model, and agent across your organization, from draft through deployment to retirement.
Apply the EU AI Act four-tier risk framework with a step-by-step Annex III wizard and maintain a full classification audit trail.
Run fundamental rights impact assessments, conformity assessments, AI risk evaluations and bias and fairness reviews with guided templates and approval workflows.
Map controls against the EU AI Act, NIST AI RMF, ISO/IEC 42001 and AIUC-1, the certification standard for AI agents, and five more: the GDPR and the California, Colorado, Texas and Washington AI rules. One answer evidences every framework it satisfies. Export compliance matrices for audits.
One subscription covers all three: DPO Central, AI Sentinel and VendorWatch. You govern your AI in AI Sentinel, and add DPO Central and VendorWatch when you need them.
Your privacy program, step by step, with a progress figure that rises only when you confirm.
The inventory of the AI systems you use or build, and the rules that apply to each.
A catalog of vendors with their certifications, each linked to the vendor's own official page.
AI Sentinel at a glance
AI Sentinel takes you through the stages of an AI governance program. Anything prepared automatically stays a draft until a person confirms it.
Where you operate, a few questions that decide which rules apply to you (such as the EU AI Act and the US state AI laws), and the policy that says which AI tools may be used, and how.
Your AI systems and their owners, unapproved tools and vendors.
Each system's risk level, impact assessments and, if you use AI agents, their evidence against AIUC-1.
Human oversight, the notice that AI is in use, and the evidence for each requirement.
Incidents and their deadlines, the review of drafts and the report for leadership.
Three hosting options, with different safeguards and levels of control.
You use it in the browser, on desktop or mobile. Nothing to install, and you can take your program elsewhere whenever you like with a simple export.
An isolated instance we run for you from Asturias, Spain, with open LLMs available and a tailored SLA.
Ask us: Managed instanceThe TODO.LAW suite on a machine in your organization. Your data never leaves your premises unless you connect an outside AI provider.
Ask us: Your own hardwareAnswer six short questions about the safeguards you need, and we show which way meets them.
| Product | Price |
|---|---|
| DPO Central, AI Sentinel and VendorWatch on the TODO.LAW cloud | Start free (15-day trial), then $179 a month or $1,800 a year |
Managed instance or your own hardware? Get a quotation.
