AI Governance Scorecard

EU AI Act bites in 2026: high-risk system and Article 50 transparency obligations apply from 2 August 2026, with fines up to EUR 35M or 7% of global turnover.

Most are not ready: 78% of executives are not fully confident they could pass an independent AI governance audit within 90 days (Grant Thornton, 2026).

Governance is the failure point: 46% of leaders name governance or compliance as the leading cause of AI underperformance, and roughly 30% have no formal AI-use policy.

Build an AI system inventory: every model and AI feature in use, who owns it, and what data it touches

Stand up monitoring, logging, and human approval gates on anything consequential

Map your controls to NIST AI RMF and ISO 42001, and check exposure against the EU AI Act high-risk list

Five governance dimensions that decide whether your AI is defensible: accountability and ownership, AI inventory and risk classification, data governance for AI inputs, monitoring/logging/human oversight, and policy/transparency/audit readiness. They map to the NIST AI RMF functions and the EU AI Act's core requirements.

It applies to AI systems placed on the EU market or affecting people in the EU, regardless of where you are based, and it is becoming the de facto global benchmark. High-risk and transparency obligations apply from 2 August 2026, with fines up to EUR 35M or 7% of global turnover.

Each dimension is rated 0 to 3, weighted (accountability and inventory carry slightly more as foundations), and combined into a 0 to 100 readiness score with a tier from Exposed to Audit-ready. The scoring rewards documented, owned, audited controls over informal ones.

No. It is a directional readiness check grounded in NIST AI RMF, ISO/IEC 42001, and the EU AI Act, not legal advice. Use it to prioritize, then validate with counsel and a proper assessment.

No. Your answers are used only to generate your scorecard and are stored in our own systems so we can follow up if you ask. We never sell or share them.

Your readiness score and tier, a per-dimension breakdown, your biggest gaps, your EU AI Act exposure, a 90-day governance plan, a downloadable PDF, and a copy emailed to you.

This is a directional readiness check grounded in NIST AI RMF, ISO 42001, and the EU AI Act, not legal advice. A free 30-day Analytics Truth Audit can map your AI and data foundation and sequence the governance work.

Score your AI governance readiness in 3 minutes across 5 dimensions mapped to NIST AI RMF and the EU AI Act, with your biggest gaps and a 90-day plan.

The EU AI Act high-risk and transparency rules apply from 2 August 2026, with fines up to 7% of global turnover.

Scored across 5 dimensions mapped to NIST AI RMF and the EU AI Act.

Rate yourself across the five dimensions that decide AI defensibility. We score you against NIST AI RMF and the EU AI Act, surface your biggest gaps, and hand you a 90-day plan. 78% of executives are not confident they would pass.

Get the per-dimension breakdown, your EU AI Act exposure, a 90-day plan, and a downloadable PDF.

Unlock the per-dimension breakdown, your biggest gaps, your EU AI Act exposure, a 90-day governance plan, and a downloadable PDF.

At this level you carry real exposure. EU AI Act high-risk and transparency obligations apply from 2 August 2026, with fines up to EUR 35M or 7% of global turnover. The 90-day plan below closes the fastest gaps first.

Governance starts with knowing your data and AI estate. The free 30-day Analytics Truth Audit inventories it, finds the gaps, and sequences the governance work against the deadlines that matter.

Directional readiness check grounded in NIST AI RMF, ISO/IEC 42001, and the EU AI Act (2026 timeline). Not legal advice. Validate with counsel and a proper assessment.