Every AI regulation, linked requirement by requirement

For each text: who is in scope, how to qualify an AI system, which requirements apply, how to prove them and by when. One check often serves several regulations: the atlas shows it.

1

Qualify

The AI system is classified under each text: risk level, role, automated decision, general-purpose model.

2

Make applicable

The verdict and the role determine which requirements apply, article by article.

3

Verify

Each requirement is proven by checks, often shared by several regulations.

23regulations and frameworks
15jurisdictions
231requirements
96 %of non AI Act requirements already covered by a shared check

Europe 8

North America 9

Latin America 1

Asia-Pacific 3

International 2

The regulations

23 / 23

EURegulationPhasing in

AI Act

How to make an AI system compliant with the EU AI Act

33 requirementsNext Aug 2, 2027
EURegulationIn force

RGPD

How to make AI compliant with the GDPR

10 requirementsNext Jan 2027
UKPrinciplesIn force

UK principles

How the UK regulates AI

6 requirementsNext 2027
CoETreatyAdopted, not yet applicable

CoE Convention

What the Council of Europe AI Convention requires

5 requirementsNext 2027
EURegulationIn force

DORA

How to cover AI systems in your DORA compliance

6 requirementsNext —
EUDirectivePhasing in

NIS2

How to bring your AI systems into NIS2 compliance

4 requirementsNext —
EURegulationPhasing in

CRA

How an AI product complies with the Cyber Resilience Act

5 requirementsNext Dec 11, 2027
EUDirectiveAdopted, not yet applicable

PLD

Product liability: what changes for AI

4 requirementsNext Dec 9, 2026
USVoluntary frameworkVoluntary

NIST AI RMF

How to apply the NIST AI RMF to your AI systems

72 requirementsNext Dec 2026
COStatuteIn force

Colorado AI Act

How to comply with the Colorado AI Act (SB 24-205)

8 requirementsNext —
TXStatuteIn force

TRAIGA

How to comply with the Texas Responsible AI Governance Act

4 requirementsNext —
CAStatuteIn force

SB 53

What California SB 53 requires from frontier model developers

5 requirementsNext Jan 1, 2027
CAImplementing rulesPhasing in

CCPA ADMT

How to comply with the CCPA automated decision-making rules

4 requirementsNext Jan 1, 2027
NYCStatuteIn force

NYC LL 144

How to comply with NYC Local Law 144

3 requirementsNext —
ILStatuteIn force

IL HB 3773

Using AI in employment decisions in Illinois (HB 3773)

2 requirementsNext —
USExecutive policyIn force

US federal

What US federal AI policy requires

4 requirementsNext 2027
CANBillWithdrawn

Canada

AI regulation in Canada after AIDA was withdrawn

3 requirementsNext 2027
BRBillUnder discussion

PL 2338

Preparing for the Brazil AI Bill (PL 2338/2023)

20 requirementsNext Oct 2026
KRStatuteIn force

AI Basic Act

How to comply with the South Korea AI Basic Act

7 requirementsNext Jan 2027
JPStatuteIn force

AI Promotion Act

What Japan expects from businesses using AI

2 requirementsNext —
CNImplementing rulesIn force

China GenAI

How to comply with China's generative AI rules

6 requirementsNext 2027
INTLCertifiable standardVoluntary

ISO 42001

How to prepare for ISO/IEC 42001 certification

13 requirementsNext Dec 2026
INTLPrinciplesVoluntary

OECD AI

Putting the OECD AI Principles into practice

5 requirementsNext —

Upcoming deadlines

after Sep 28, 2026

Oct 2026PL 2338 · Vote pushed past the October 2026 electionsDec 9, 2026PLD · Transposition and application to products placed on the marketDec 2026NIST AI RMF · Expected RMF revisionDec 2026ISO 42001 · CEN-CENELEC JTC 21 harmonised standards for the AI Act (prEN 18286 QMS)Jan 1, 2027SB 53 · First anonymised annual OES reportsJan 1, 2027CCPA ADMT · ADMT compliance requiredJan 2027RGPD · Possible adoption of the Omnibus amendmentsJan 2027AI Basic Act · Announced end of the fine grace period
PastSet in the textPotentialTo verify

The most shared checks

number of regulations

Fairness and bias are evaluated and results documentedCHK-BIAS9
System designed to allow human oversight (stop button, override)VER-008-028
Complete technical documentation compliant with Annex IVVER-005-017
Risk and incident response procedureVER-022-F-017
Affected persons informed of the use of the AI systemVER-029-D-017
Decision explanation procedure documentedVER-033-D-017
Procedure to contest a decision and obtain human review publishedCHK-BR-CONTEST7
See the full crosswalk →

Run these requirements across all your AI systems

TrustFlow inventories your systems, qualifies them under each regulation and collects evidence once for every referential.

Request a demo