AIComplianceHub Reviews & Product Details

AIComplianceHub helps organisations in the Netherlands meet the EU AI Act (Regulation (EU) 2024/1689, as amended by Regulation (EU) 2026/1744) themselves, without a consultancy project. Each AI system is registered once. From that record the platform derives the AI Act risk classification and the obligations that follow from the organisation's role, provider or deployer. The same record holds the GDPR facts for that system and signals whether a DPIA is likely required, citing the relevant point of Article 35(3) GDPR. What is in the platform: - Free AI risk scan with a PDF report, and a free plan to start the register. - AI register with risk classification per system, based on Article 5, Article 6 with Annex I and Annex III, and Article 50. An AI landscape map shows each system with its connections. - AI agent register. Agents from Copilot Studio, n8n, custom GPTs or own code are checked against an agent policy the organisation sets itself. - Risk register per AI system, with likelihood and impact, treatment, owner and review date. - Vendor library with assessments of common AI tools. - Document generation for nine document types, including an AI policy, a risk assessment per system, a transparency statement for Article 50, a human oversight procedure and a FRIA for Article 27. From Core, documents carry the organisation's own logo and colours. - E-learning on AI literacy for Article 4, with a certificate per employee. Article 4 has applied since 2 February 2025. - Shadow AI detection: an anonymous staff survey, and from Core a Microsoft 365 connection that lists which AI apps were granted access to company data. - An approval route for new AI tools, with conditions the organisation chooses, such as accepting the AI policy and holding a valid training certificate. - AI Act Q&A assistant in Dutch, drawing on a curated knowledge base of the regulation. - Compliance dashboard, quarterly governance check and an audit file. The audit file bundles register, documents, training certificates and twelve months of audit trail into one ZIP for an auditor or buyer. - In Scale: a GDPR record of processing activities (Article 30), webhooks and Microsoft Teams notifications, and a read-only API and MCP server. - Microsoft 365 single sign-on on every plan. Where the platform stops: it is a tool, not legal advice, and it does not promise guaranteed compliance. It signals whether a DPIA is likely needed but does not write the DPIA. Data breach notification is handled outside the platform. The API and MCP server are read-only. The interface is in Dutch. Three information pages and part of the e-learning are available in English.