GRCLibrary.ai

Policy

AI Compliance Policy

This policy establishes the organization's obligations and commitments for AI regulatory compliance. It defines the classification of AI systems, the governance structures accountable for compliance, the obligations that apply to the organization as an AI deployer and, where relevant, as a provider, and the obligations that arise under applicable national and international AI governance frameworks.

Type
Policy
Version
1.0.51
Date
2026-11-01
Owner
Chief Information Security Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
AI Governance
Review frequency
6 to 12 months and upon material AI governance or regulatory change
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • 1. Purpose and scope
  • 2. Policy statement
  • 3. Governance
  • 4. AI system classification
  • 5. Deployer obligations for high-risk AI systems
  • 6. General-purpose AI model obligations
  • 7. National and regional compliance
  • 8. AI compliance audit and review
  • 9. AI transparency and disclosure
  • 10. AI incident reporting
  • 11. Non-compliance consequences
  • 12. Related documents and framework alignment

Frameworks it maps to

Related documents