Valdra/AI Governance

Classify your AI risk
before the regulator does

The EU AI Act sorts every AI system into prohibited, high-risk, limited, or minimal — and each tier carries very different obligations. Valdra's guided classifier walks you through Article 5, Annex III, GPAI, and Article 50 to produce a defensible classification with the obligations attached.

AI Governance
EU AI Act · ISO 42001 · NIST AI RMF · AIDA
4 AI systems governed
0
Prohibited
1
High-risk
2
Limited
1
Minimal
1 system needs a FRIA
Annex IV docs auto-generated
2 shadow-AI tools detected
Built for Canadian businesses
421+Entity Types
95%+F1 Accuracy
0 bytesData Retained
🍁Canadian Servers
PIPEDACertified
6–8

distinct obligations trigger the moment a system is classified high-risk

1 EU AI Act, Title III, Chapter 2

Try the free Risk Checker
AI Systems Registry
EU AI Act · ISO 42001 tiers
4 systems
Resume Screener
Internal · GPT-4o
High-risk
Support Copilot
Intercom Fin
Limited
Churn Predictor
Internal · XGBoost
Minimal
Doc Summarizer
Claude
Limited

Every AI system, classified and tracked.

Register every AI system your organization builds or buys, then auto-classify each one against the EU AI Act, ISO 42001, and NIST AI RMF. Prohibited, high-risk, limited, or minimal — you always know your exposure and exactly what each tier requires.

Request a demo
EU AI Act Risk Classifier
Resume Screener · automated hiring
Classification
High-Risk
Annex III §4 — employment & worker management
Conformity assessment required
Human oversight mandated
Technical documentation (Annex IV)
Obligations Map2 of 5 met
Technical documentation (Annex IV)
Risk management system
Human oversight measures
Transparency notice to users
Post-market monitoring plan

Documentation that writes itself.

Annex IV technical files, model cards, and Fundamental Rights Impact Assessments generate from your system data — then flag for refresh the moment a model changes. The evidence regulators ask for, without the blank page.

Request a demo

Additional features

Request a demo

Guided Classification

A structured questionnaire walks each system through prohibited practices (Art. 5), high-risk use cases (Annex III), GPAI thresholds, and Art. 50 transparency.

Defensible Verdict

Produces a clear tier — prohibited, high-risk, limited, minimal — with the reasoning and statutory basis recorded for your governance file.

Obligations Attached

The moment a system is classified, the obligations that tier triggers are surfaced — conformity assessment, human oversight, documentation, registration.

GPAI Detection

Identifies general-purpose AI and the additional transparency and systemic-risk obligations that apply to foundation models.

Reusable Engine

The same classification engine powers Valdra's public Risk Checker — classify a system once, reuse the result across documents and obligations.

Re-Run on Change

When a system's purpose or model changes, re-run the classifier on the diff — the tier and obligations update automatically.

Get compliant and build trust

Join hundreds of Canadian organizations using Valdra to automate their privacy obligations — no consultants required.

Start Free — No credit card required

🍁 Canadian data residency · PIPEDA compliant · SOC 2 in progress

Our own compliance

We run our own compliance programme inside Valdra — the product we sell. Our SOC 2, ISO 27001 and ISO 42001 programmes are actively in progress; we do not claim certifications we do not yet hold.

Valdra compliance badge — click to verify
  • PIPEDA
  • Law 25 (Quebec)
  • CASL
  • Data hosted in Canada 🇨🇦
  • AI governance
View our Trust Centre

Self-declared, not audited by a third party. Click the badge to verify it is genuine and see what it covers.

EU AI Act Risk Classifier | Valdra