See what works today.
The EU AI Act assessment works now. Other rule sets are marked as planned so you know what you can use today.
EU AI Act
Risk sorting, task lists, assessment questions, document drafts, and transparency work are available now.
GPAI (General-Purpose AI)
Provider questions and a training-data summary draft are available now. Extra systemic-risk work needs expert review.
ISO/IEC 42001 — AI Management System
A future module is planned. It is not part of the working assessment today.
NIST AI RMF
Some task labels may show NIST links. A full NIST assessment is not available yet.
SOC 2 (Type I, then Type II)
Planned. No SOC 2 assessment or certification is available in Grace today.
ISO/IEC 27001
Planned. No ISO 27001 assessment or certification is available today.
GDPR + DPA tooling
Planned. Grace has legal pages today, but it does not run a GDPR review.
HIPAA
Planned. No HIPAA assessment is available today.
PCI DSS
Planned. No PCI DSS assessment is available today.
Use one file more than once
Some tasks show more than one framework label. This can help your team find files that may support future reviews. It does not complete or certify another framework.