Crosswalk: what AI regulations have in common

Each framework linked to the control themes. A thick link means many requirements on that theme. Click a matrix cell to open the detail.

Graph

Width = number of requirements. Hover a node to isolate its links.

Requirements per regulation and theme

	Governance					Assessment				Build						People & use				Lifecycle & third parties
	Governance & accountability	Inventory & categorisation	Literacy & competence	Risk management	Quality & conformity	Prohibited practices	Impact assessments	Fairness & non-discrimination	Personal data	Data governance	Technical documentation	Logging & traceability	Accuracy & robustness	Cybersecurity	Environmental impact	Transparency & notice	Synthetic content	Human oversight	Explanation & redress	Post-deployment monitoring	Incidents & corrective action	Authorities & registration	Third parties & value chain	Intellectual property
AI Act			2	3	4	1	2	1	1	2	8	3	2	2		5	1	1	1	3	4	4	2	1
RGPD		1					1		3	1				1		1		1	2		1		1
UK principles	1							1					1	1		1		1	3
CoE Convention				1			1	1	1							1	1		1
DORA	1	1		1									1	2							2		1
NIS2	1		1											1							1	1	1
CRA					1						1			2						1	1
PLD											1	1	1	1						1			1
NIST AI RMF	13	2	2	11			6	1	2		8		11	1	1	1		3	4	8	6		5
Colorado AI Act	1			1			1	1			1					3		1	1		1	1	1
TRAIGA				1		1					1					1						1
SB 53	2			1							1			1		1					1	1
CCPA ADMT							1		1							1		1	2
NYC LL 144								1								2			1
IL HB 3773								1								1
US federal	1	1					1						1					1	1	1			1
Canada							1	1					1			1		1	1
PL 2338		1		3		1	1	1	1	1	3	2	2	1	1	4	1	2	2	1	1		2	2
AI Basic Act		1		3			1				1					1	1	1	1		1	1
AI Promotion Act	2			1				1								1
China GenAI				1						1			1				1		1	1	1	1		1
ISO 42001	3		1	1	3		1			1	1	1	1			1		1		2	1		1
OECD AI	1							1	1				1	1	1	1

TrustFlow inventories your systems, qualifies them under each regulation and collects evidence once for every referential.