The ad platform optimises with a model, the chatbot answers EU customers unsupervised, someone in growth wired an applicant ranker into the ATS, and half the creative comes out of a generator nobody logged. High-risk obligations became fully applicable on 2 August 2026. When somebody asks which of those systems is high risk and where the documentation is, the answer cannot be a shrug. This is the register — one row per system, with the tier, the written rationale and the review date already worked out.
Every system gets a tier and a reason, not just a row. The dashboard shows how much of the documentation you could actually produce today, and which classifications have gone stale.
A list records what you use. This works out which tier each system falls in, writes down why, and tells you what is missing before someone else finds out.
Twenty plain questions across prohibited practices, Annex III high-risk uses and Article 50 transparency triggers. Tick what the system actually does and the tier resolves as you answer — prohibited beats high risk, high risk beats limited, and nothing is decided by vibes.
Each system carries a written explanation naming the specific trigger that set its tier. That sentence is the part a reviewer actually wants, and the part nobody remembers six months after the decision.
A classification made before a model upgrade is a classification that is wrong now. Every system gets a next-review date, and the dashboard counts the ones already overdue instead of letting them sit.
CSV for the compliance file or a shared drive, JSON for a backup you can reload later. The export carries the tier, the rationale, the oversight arrangement and the documentation score beside every system.
Not for counsel, and not for a governance platform nobody in marketing has a login to.
You are the deployer of most of the AI in the building, and deployer duties are yours whether or not anyone told you. Keep one register and update it as tools come and go.
You signed the contracts for the stack. Filter by provider, see which systems carry real obligations, and chase the vendor documentation you are missing rather than all of it at once.
Log each client's systems separately and hand over a dated CSV with the engagement. A classification record attached to delivery is cheap to produce and awkward to be without.
Client audit, board question or a regulator's letter — the useful artefact is a dated register showing what you classified, on what basis and when. That is the whole output.
“We know we use a lot of AI. We could not tell you which of it is regulated.”
Enterprise AI-governance platforms are priced for enterprises and sold to a risk team. Counsel bills by the hour and starts by asking you to list your AI systems — the list you do not have. Between those two there was nothing structured, cheap and owned by the marketing team itself — that is what this is.
One self-contained HTML file. No accounts, no API keys, no network calls, nothing uploaded. It installs to your phone or desktop home screen, works offline, and every entry stays in your own browser. Built by Mulkern AI Systems, who ship AI operations tooling for marketing teams.
A structured record-keeping aid, not legal advice. It helps you find the gaps and decide what to take to counsel — it does not replace them.
Instant access after checkout. No refunds. All sales are final.