The AI Liability Act was withdrawn — here's what applies now
The AI Liability Directive was withdrawn in October 2025. National law, the revised Product Liability Directive, and the AI Act's evidentiary role fill the gap.
Read more →2 guided paths · 6 phases each
Before AI can actually help your business,
your data needs to be in order.
Templates and guides to structure your data — clear ownership, catalog, quality — and then deploy AI safely on that foundation. Referenced article by article with the AI Act, GDPR, and DAMA-DMBOK, no jargon to translate.
Data Governance · AI Governance
Global
Free assessment · Templates from €19
+200
assessments
completed
completed
48
resources ready
to download
to download
Art. 10
AI Act referenced
in every resource
in every resource
🆓
Assessment
always free
always free
/// The problem
Does any of this sound familiar?
You're not alone. These are the same 8 symptoms we see in most organizations — and each one has a clear path below.
If this happens with your data…
No one knows who "owns" each dataset.
Every team has its own "truth" — and the numbers don't match.
No one knows who accessed which data, or when.
"Where does this data come from?" — and you improvise an answer.
If this happens with your AI…
You use AI without knowing which risk category you fall into.
No registry of which AI each team uses, or who approved it.
No one has defined what's allowed with customer data.
If the AESIA asks tomorrow, you have nothing to show.
The good news: every symptom has a concrete next step. Choose your starting point ↓
/// The foundation before you experiment with AI
Prepare your foundation: Data Governance and AI Governance
Two entry points into the same path — the one that leads to experimenting with AI knowing the foundation is already solid. Pick yours based on where you are now, and we'll guide you phase by phase.
Where to start? If you don't yet have roles or structure around your data, start with Data Governance — it's the foundation Art. 10 of the AI Act requires, and the one that supports any serious AI experimentation later. If you already use AI day to day and need to comply with the AI Act, go straight to AI Governance.
Whichever path you choose, there's one thing you can't control: the calendar.
Updated for the Digital Omnibus
The AI Act is already binding.
Do you know what applies to you?
Article 50 transparency obligations have applied since August 2026. Annex III high-risk obligations were postponed by the Digital Omnibus and now take effect in December 2027 — real breathing room, not a reason to wait. Knowing whether your organization falls within scope, which systems to classify, and what documentation to prepare is the first step — and it doesn't depend on company size.
Classify AI systems
Unacceptable, high, limited, or minimal risk per Annex III
Document and keep evidence
Art. 10-11: data, technical documentation, and usage records
Meet the right deadlines
Art. 5: Feb 2025 · GPAI: Aug 2025 · Art. 50: Aug 2026 · Annex III: Dec 2027
/// Free assessment · 5–12 min
Is your company
Is your company
ready?
Select the relevant modules and get your maturity level, priority gaps, and a personalized roadmap.
AI Act
Data Governance
NIS2
RGPD
ISO 42001
Start now →
🆓 Free
Instant results
+200 assessments
/// Regulatory Timeline
AI Act Key Dates
The Regulation applies in phases. Find out what each milestone requires and when it takes effect for your organization.
August 2024
AI Act enters into force
Regulation (EU) 2024/1689 enters into force. Transition period begins.
CompletedFebruary 2025
Prohibition of unacceptable practices
The most harmful AI uses are now prohibited, with narrow exceptions.
CompletedAugust 2025
Obligations for general-purpose AI models (GPAI)
Providers of general-purpose AI models must meet specific obligations.
In progressAugust 2026
Article 50 transparency obligations
AI-generated content, chatbots and deepfakes must be labeled as such. Annex III high-risk obligations, originally due this date, were postponed by the Digital Omnibus.
In forceDecember 2027
Full obligations for high-risk systems (Annex III)
High-risk AI systems (Annex III) must meet every requirement from this date — postponed from August 2026 by the Digital Omnibus.
Next milestoneAugust 2028
Annex I high-risk systems (regulated sectors)
AI embedded in safety-regulated products must meet high-risk requirements — postponed from August 2027 by the Digital Omnibus.
Upcoming
/// How Much Time Do You Have Left?
Calculate your real deadline
Answer 3 questions and we'll tell you exactly how much time you have and what you should do first.
Does your organization use or deploy AI systems?
This is what Regulation (EU) 2024/1689 itself says
Maximum fine for violating Art. 5 prohibitions
Price of the Complete Pack: 24 products
€35M · 7%
€599
of annual global turnover, whichever is higher
one-time payment · no subscription
Source: Regulation (EU) 2024/1689, Arts. 99 and 101. No template guarantees compliance on its own, but it's the first documented step an auditor or authority will ask to see.
Now you know how much time you have. Here's exactly what you need so you don't run out of it:
/// Available Resources
Choose what you need
Instant download · VAT included · Referenced article by article with the AI Act
€19–69 per product
24 products
AI Act
Risk Classification Checklist
Annex III decision tree. Determine if your system is high-risk with documented justification.
AI Act
AI Systems Registry Template
A registry compliant with Art. 11 and Annex IV. Audit-ready from day one.
AI Act NEW
GPAI Compliance Checklist
For providers of general-purpose AI models. 11 controls per Arts. 51-56.
Governance
AI Acceptable Use Policy
An editable document ready for approval. Covers Art. 5 prohibitions and Art. 50 transparency.
Governance
Data Governance RACI
Roles and responsibilities for AI Act Art. 10. Defines who does what for data quality.
Governance NEW
Data Governance Committee Charter
Formalize the committee that approves the rest of your data policies.
Governance
RBAC Access Policy
Role-based access control per GDPR Art. 32, with a ready-to-adapt Word template.
Audit
Governance Audit Dashboard
10 compliance KPIs in Excel with a Power BI implementation guide.
Audit NEW
Art. 10 AI Act Compliance Pack
First product in the Data Quality line: dataset inventory, bias, and representativeness.
Implementation
Excel Implementation Roadmap
36 tasks across 6 phases for the AI Act and Data Governance, with automatic progress tracking.
FULL PACK · 24 PRODUCTS
Save ~€417
The entire catalog in a single download
AI Act + Data Governance, in English and Spanish. Also available separately: AI Governance Pack (14 products) or Data Governance Pack (10 products).
€599
€1,016
· VAT included · one-time payment
See all 3 packs →
Instant download
No subscription · Pay by card, PayPal, Apple Pay, or Google Pay
No subscription · Pay by card, PayPal, Apple Pay, or Google Pay
/// Comparison
ISO 42001 vs NIST AI RMF vs AI Act
Still unsure if the AI Act is enough on its own, or if you need to fit it with another framework? The three main options, compared on what matters most when choosing.
| Dimension | ISO 42001 | NIST AI RMF | AI Act |
|---|---|---|---|
| Type | International standard | Voluntary framework | Binding EU regulation |
| Certifiable | Yes | No | — N/A |
| Geographic scope | Global | Global (U.S. origin) | European Union |
| Mandatory | Voluntary | Voluntary | Mandatory |
| Main focus | Management and audit system | Operational risk management | Regulatory compliance |
| Maturity required | Mid-high | Any level | Varies by system risk |
| Implementation cost | Mid-high | Low-mid | Variable (fines up to 7% of turnover) |
| Relationship with the AI Act | Convergent — can help demonstrate conformity | Complementary — operational guidance | — |
| Best for | Demonstrating maturity to clients and regulators | Implementing internal risk practices | Legal compliance in the EU |
The most common combination at mid-to-high maturity organizations: NIST AI RMF as internal operational guidance + ISO 42001 as the certification reference + the AI Act as the legal compliance framework.
/// Resources and Updates
Once you've decided, here's how to keep the momentum
Regulatory updates, stage-based recommendations, and quick access to the assessment.
Article 50 of the AI Act: a practical guide to labeling chatbots and AI content
Article 50 took full effect on August 2, 2026. What it requires in practice, and what to check this week — including for organizations outside the EU.
Read more →Data Governance explained: definition, the 8 pillars, and why it's non-optional
Definition, roles, a 6-phase implementation plan, tools in 2026, and why the AI Act makes Data Governance non-optional.
Read more →
/// Community survey · 2 minutes
How's the Data & AI talent market doing?
Salaries, most in-demand roles, and company maturity across Spain and LatAm — anonymous, with results shared with participants and published on the blog for the whole community.
Take the survey (2 min) →
/// Updated regularly
Latest news
The latest published on Data Governance and AI Governance, sorted by date.
AI Governance
Aug 12, 2026
The AI Liability Act was withdrawn — here's what applies now
The AI Liability Directive was withdrawn in October 2025. National law, the revised Product Liability Directive, and the AI Act's evidentiary role fill the gap.
AI Governance
Aug 3, 2026
Article 50 of the AI Act: a practical guide to labeling chatbots and AI content
Article 50 took full effect on August 2, 2026. What it requires in practice, and what to check this week — including for organizations outside the EU.
Data Governance
Jul 13, 2026
Data Governance explained: definition, the 8 pillars, and why it's non-optional
Definition, roles, a 6-phase implementation plan, tools in 2026, and why the AI Act makes Data Governance non-optional.
Data Governance
Jul 11, 2026
The Data Governance hierarchy: from business strategy to daily execution
Why most Data Governance projects fail when they start directly with policies, with no business or data strategy behind them.
Data Governance
Jun 25, 2026
Data Governance Framework: step-by-step implementation guide
Complete 4-phase roadmap from diagnosis to scaling, based on DAMA-DMBOK v2 and aligned with the AI Act and GDPR.
AI Governance
Jun 20, 2026
ISO 42001: certification requirements checklist
The controls required by the standard, explained one by one and ready to audit.
/// Blog
Latest Articles
In-depth analysis on the AI Act, frameworks, and data governance.
How to Measure Data Quality: KPIs, Thresholds and Dashboards
The 7 fundamental data quality KPIs, how to set thresholds with the business, and how to build a dashboard someone with authority actually checks weekly.
Leer →The 6 Dimensions of Data Quality, Explained With Real Cases
Completeness, accuracy, consistency, timeliness, validity, and uniqueness: what each one measures and real cases that illustrate the impact when it fails.
Leer →Data Quality Management: What It Is, How to Measure It and Why the AI Act Cares
Data quality dimensions, how to implement rules as code, tools in 2026, and what the AI Act requires of training data quality.
Leer →Key Skills in Data and AI Governance: Beyond the Technical
What a Data or AI Governance role truly needs isn't Python or advanced SQL. It's judgment, negotiation, systems thinking, and regulatory understanding.
Leer →Is AI Cheaper Than an Employee? The Real Answer for Data Professionals
What an AI agent doing a Data Governance Specialist's job really costs. Real numbers, and where AI amplifies rather than replaces.
Leer →Roles and Responsibilities of a Data Governance Team: The Minimum Structure for the AI Act
What each Data Governance role does, what profile it needs, and the minimum structure for governance to work and comply with the AI Act.
Leer →
/// Glossary
Key AI Governance Terms
The essential concepts of the AI Act, Data Governance, and ISO 42001, explained clearly.