One platform, two parts
From your first AI system to evidence you can sign.
Two parts, one register of your AI. Compliance takes each system through seven steps to evidence you can sign, for the EU and the UAE together. Cost and value shows what each system costs beside what your team says it returns.
01
Declare
Start with a guided intake for each AI system: what it does, who it affects, where it is used, and whether you built it or bought it. That last answer matters most, because the law asks different things of the company that builds an AI system and the company that uses it.
02
Classify
Each system is screened against the practices the EU AI Act prohibits outright, and classified for risk. AM8 proposes; a named person on your team confirms or overturns the result, and the record shows who decided and when.
03
Obligations
You get a clear plan of what applies to you: each duty, the jurisdiction it comes from, the date it is enforced from, and what you need to hold to meet it. The obligation model is maintained by named legal experts.
04
Generate
AM8 drafts the documentation each obligation calls for, from your own facts and scoped to your role. No blank templates to fill in, and no document written for a company in a different position from yours.
05
Verify
Each draft is checked independently before your reviewer is asked to read it, and anything the check disagrees with is shown to them rather than quietly resolved. A draft that has not been checked says so. AI drafts and analyses here; it never makes the decision.
06
Sign
Only the person you name can sign, and no app, script or integration can get around that. The signature covers exactly the content they approved: change the document and it needs signing again. Corrections are added to the record, never written over it.
07
Monitor
Your controls are re-tested every day, each against its own enforcement date. Evidence is collected as they pass, a finding opens when one fails and closes when it recovers, and from Professional anything that slips from passing to failing alerts you the same day. Compliance drifts, so AM8 keeps measuring it.
2 · Cost and value
What each AI system costs, and what your team says it returns.
Cost, as reported
Connect a provider account or upload its billing export, and see what each AI system costs as those accounts report it.
Value, declared and signed
Your team records the value it expects from each system, with the inputs and formula shown and the name of the person who signed it.
Spend nobody has claimed
Spend not attributed to any AI system you declared is flagged for your team to assign.
Each figure is labelled for what it is, and AM8 never subtracts one from the other.
Evidence integrity
Evidence that stands on its own.
Auditors and regulators do not accept “the AI said so”. They accept records. AM8 keeps every decision on the record: the law applied, the facts declared and who signed, in a form that cannot be quietly altered. Anyone reviewing your file can see what was decided, on what basis, and by whom.
A history you can stand behind
When something changes, the correction is added alongside the original. Nothing is rewritten, so you can show what you knew, and when you knew it.
Sign-off that means something
Only the person you name can sign, and a signature covers exactly what they approved. Edit the document afterwards and it needs signing again.
Files anyone can check
Exported audit packs are cryptographically signed, so an auditor or customer can confirm for themselves that nothing changed after it left AM8.
The public key and the verifier are published on our Trust Center, so anyone you share a file with can check it for themselves.
See the published key and verifierJurisdiction coverage
The EU and the UAE, in one place.
Every obligation, deadline and document for each jurisdiction we cover, kept current by named legal experts.
| Jurisdiction | Regimes covered |
|---|---|
| European Union | EU AI Act (post-Omnibus dates) · GDPR touchpoints |
| United Arab Emirates | PDPL · DIFC Regulation 10 · UAE AI Charter |
Operating somewhere else as well? Tell us where.
Talk to usGood to know
What AM8 does, and where it stops.
A compliance tool should be clear about its limits. Here are ours, so you know exactly what you are buying.
We do not give legal advice
For compliance, AM8 drafts and monitors. Generated documents are watermarked DRAFT and carry no authority until a qualified human on your side reviews and signs them.
Discovery reaches what your identity provider sees
Connect Microsoft Entra, Google Workspace or Okta and AM8 surfaces the AI applications your people have been granted access through it, including ones IT never registered. Anything outside the identity provider is not visible to it, and we do not claim otherwise.
Article 50 scanning finds, your team decides
AM8 fetches your public AI surface and reports whether a disclosure is present and what it found. Whether the wording is prominent enough is a legal judgement, and it stays with a human.
No third-party certifications yet
No SOC 2 report or ISO certificate yet. Our own compliance posture is available to any customer or auditor who asks.
Cost reaches what your connected accounts report
AM8 shows the cost your connected provider accounts and uploaded billing exports report. Spend outside them, such as a tool paid on a personal card, is not visible to it. Value is what your team declares and signs; AM8 does not net it against cost.
See it run against your own AI systems.
A mapping call takes forty minutes. You leave with a clear picture of your EU and UAE obligations, and of how AM8 would show what each of your AI systems costs, whether or not you buy anything.