Governance as a Service · by Wanlogix

Operational AI Governance & Third-Party AI Risk Management

AIQ gives regulated organisations a single platform to identify, classify, and evidence their AI exposure — across internal systems and third-party suppliers — continuously.

The governance gap

Most organisations cannot identify or evidence their AI exposure consistently

Regulatory expectations are rising. The EU AI Act, DORA, NIS2, and FCA requirements demand structured governance — but most teams are working from spreadsheets and isolated assessments.

Regulatory frameworks

EU AI Act, DORA, NIS2, ISO 42001, NCSC CAF and more — all mapped and maintained.

360°

Supplier visibility

Evidence collection, submission review, and assurance scoring across your third-party AI estate.

Audit-ready

From day one

Tamper-evident audit trail, SHA-256 hash-chained logs, CSV and HTML export at any time.

Platform capabilities

Everything you need for AI governance

AI Inventory

Register every AI system in scope. Capture technical profiles, deployment models, data flows, and business context in a structured, searchable registry.

Risk Classification

Step-by-step EU AI Act Annex III screening wizard. Automatically assign risk tiers — Prohibited, High-Risk, GPAI, or Limited — with documented rationale.

Supplier AI Governance

Dedicated supplier portal for evidence submission and review. Manage third-party AI risk across your entire supply chain with structured assurance workflows.

Evidence Management

Centralised evidence locker with control mapping, expiry tracking, and chain-of-custody logging. Every piece of evidence traceable back to its obligation.

Governance Dashboards

Live KPIs, risk posture badges, framework progress bars, and obligation status — all in one executive-ready view. Print-ready HTML reports at any time.

Continuous Monitoring

Due-date SLA tracking with OVERDUE and SOON badges, automated email alerts, escalation workflows, and a full tamper-evident audit trail.

Operationalisation

How it works

Discovery

Map your AI landscape. Register every system and supplier. Capture the technical and commercial context needed for governance.

Assessment

Classify risk under EU AI Act and other frameworks. Generate obligation sets. Conduct structured assessments with scoring and trend tracking.

Onboarding

Engage your suppliers through the dedicated portal. Collect evidence, review submissions, and map controls to obligations systematically.

Continuous Governance

Monitor obligations, track due dates, manage change events, and maintain an always-ready audit trail — without a manual effort spike before every review.

Request received