Compliance documentation for
every framework that matters.

7 documents for organisations starting their AI Management System journey. Gap assessment, governance charter, project plan, risk appetite, stakeholder register, and executive brief.

10 pre-formatted evidence templates for ISO 42001 certification audits. Clause-mapped evidence registers, objective evidence logs, corrective action records, and management review minutes.

8 documents adapting ISO 42001 for Australian regulated industries. Sector risk overlays for financial services, healthcare, and government. APRA, APS, and TGA alignment notes.

9 editable Word documents for ISO 27001:2022 certification. Policy suite, risk register, Statement of Applicability covering all 93 Annex A controls, and management review pack.

7 documents covering the full EU AI Act compliance journey. Risk classification, prohibited practices, Article 9 risk management, conformity assessment, technical documentation, and post-market monitoring.

9 documents for governing generative AI deployment. Acceptable use policy, model risk assessment, vendor evaluation, output quality framework, and incident response. ISO 42001 and EU AI Act aligned.

9 documents implementing the NIST AI Risk Management Framework. GOVERN, MAP, MEASURE, and MANAGE functions. Risk profile, Trustworthy AI characteristics assessment, and implementation roadmap.

8 documents for AI vendor procurement and risk assessment. RFP template, 60-question due diligence questionnaire, risk scoring matrix, contract clause library, and ongoing monitoring plan.

10 documents for SOC 2 Type II readiness. Trust Service Criteria gap assessment, control mapping matrix, system description template, evidence collection tracker, and audit preparation checklist.

7 documents aligned to the OAIC PIA methodology and Australian Privacy Principles. Threshold assessment, full PIA template, data flow mapping, and Privacy Act reform checklist.

7 documents covering the full vendor lifecycle. Vendor tiering, due diligence questionnaire, weighted risk scoring, contract checklist, monitoring tracker, and exit playbook. CPS 230 and ISO 27001 aligned.

7 documents covering the full incident lifecycle. NDB scheme and GDPR Article 33 aligned. Triage checklist, investigation workbook, OAIC notification templates, response log, and post-breach review.

15 production-ready architecture decision records for AI/ML adoption. Framework selection, model hosting, inference, observability, RAG vs fine-tuning, privacy (APP 8), bias, incident response, and cost optimisation.