A clear, defensible position per regulation — every number traces to approved rules and their verbatim sources. The answer is ready before leadership thinks to ask.
Attestation is CCO-only and writes an immutable artifact to the audit trail
EU AI Act
attentionEuropean Commission · 44/46 rules approved · 1 open conflict
GDPR
compliantEDPB · 38/38 rules approved · no open conflicts
MiFID II
attentionESMA · 39/41 rules approved · 1 open conflict
DORA
compliantESAs · 21/22 rules approved · no open conflicts
SEC 17a-4
compliantSEC · 12/12 rules approved · no open conflicts
Internal policies
attentionModel Risk Committee · 26/29 rules approved · 1 open conflict