Hael
Sign inBook a demo
AI Governance Platform

The governance system of record for enterprise AI.

Hael inventories every AI system you run, classifies it against the regulations that apply, and produces the audit-grade files regulators, auditors and enterprise buyers ask for — in one platform, for compliance, legal and security teams.

app.hael.ai
Annex IV Pipeline · Atlas Bank plc
Surface system
Triage risk class
Map to clauses
Draft artefact
Seal & file
92%
EU AI Act
78%
ISO 42001
64%
NIST AI RMF
Live · synced 2 min ago

Continuously mapping the regimes that govern you.

Hael ingests primary regulatory text — articles, annexes, controls — and keeps your inventory mapped clause-by-clause as the regimes evolve.

EUEU AI Act
INTISO/IEC 42001
USNIST AI RMF
USTreasury FS AI RMF
UKFCA CP24/16
UKPRA SS1/23
SGMAS FEAT
HKHKMA GL/AI
USColorado SB 24-205
USNYC Local Law 144
EUGDPR Art. 22
EUDORA
How Hael works

Discover what you run. Classify the risk. Produce the record.

Three steps from an unmapped estate to audit-grade evidence — each one feeding the next.

01 · DISCOVER

Find every AI system you're running.

Including the AI embedded in third-party tools and the systems shipped without anyone telling compliance. Hael builds a continuously reconciled inventory — the foundation every regulation now assumes you already have.

AI SYSTEMS · ACME CO
32 systems · 4 newly discovered
Search systems, owners, vendors…
Credit Scoring Engine
first-party
Support Copilot
embedded · 3rd-party
HR Screening Tool
first-party
Vendor: Salesforce Einstein
embedded · 3rd-party
NEW
02 · CLASSIFY

Know each system's risk tier and what it obligates.

Every system is assessed for risk tier, provider-or-deployer status, and the specific obligations that follow — reasoned from the system's real configuration, not a self-assessment questionnaire.

CLASSIFICATION
SYS-014
Credit Scoring Engine
Decisions on consumer credit applications
RISK TIER
Minimal
Limited
High-risk
Prohibited
Role: ProviderIn scope · ISO 42001
EU AI Act · Annex III
GDPR Art. 22
ISO/IEC 42001 · in scope
Classified from system configuration · reviewed 14 May
03 · PRODUCE

Generate the records, automatically.

With the system discovered and classified, Hael produces the audit-grade artefacts each obligation requires — versioned, mapped to the obligation they satisfy, and regenerated when the system changes. The work GRC tools leave you to do by hand.

GENERATED FILES
86% coverage
Annex IV Technical File
v4 · Generated 2 min ago
Generated · Approvedview
Risk & Impact Assessment
v2 · Generated
Generated · Approvedview
Model Card
v2 · Generated
Generated · Approvedview
Statement of Applicability
v1 · Generated
Generated · Draftview

Discover, classify, produce — then it stays current as your AI estate changes.

The Platform

Every stage of AI governance, in one platform.

From first inventory to audit-grade evidence.

Inventory

A continuously reconciled register of every AI system in scope, including AI embedded in third-party tools.

Search systems…
AI-0142KYC triageHigh
AI-0207Pricing modelLimited
AI-0318Support copilotMinimal
Classify

Every system assessed for risk tier, provider or deployer status, and the obligations that apply.

Risk tier
MinimalLimitedHigh
Role
DeployerProvider
Files

The artefacts regulators, auditors and enterprise buyers request: Annex IV files, impact assessments, model cards. Versioned. Exportable.

Annex IV · v4
Approved
Impact Assessment · v2
Approved
Model Card · v3
Draft
Trust Center

An external surface where buyers, auditors and regulators verify your AI governance posture in real time.

trust.atlasbank.com
Public trust profile
EU AI ActISO 42001SOC 2
Request access
Agent Governance

Native coverage for autonomous and agentic AI systems, including third-party agents acting on your behalf.

PR
Procurement agent
In scope
RE
Reconciliation agent
Supervised
OU
Outreach agent
Autonomous
Coverage Map

Every obligation across every framework, mapped to the files and controls that satisfy it.

Art. 9
Art. 14
MAP-2
MEAS-1
EU AI Act
ISO 42001
NIST AI RMF
The Evidence Layer

Compliance was never a document problem.

It is an evidence problem. Hael produces the evidence — and runs the controls behind it.

Generated from each system's real configuration.

Mapped to the obligation it satisfies.

Re-run on every change, not once a year.

Files · SME Loan Underwriting Assistant
Evidence pack
4 artefacts on file
86%
Coverage
Artefact
Version
Status
Annex IV Technical Filev4Approved
Model Cardv2Approved
Risk & Impact Assessmentv2Approved
Statement of Applicabilityv1Draft
Who it's for

Built for the team accountable for AI risk.

Whether you're scoping your first AI governance programme or running one across a hundred systems.

Startups

For the founder or first compliance hire being asked the AI security questionnaire for the first time. Hael gets you to a defensible position fast, without a six-figure consulting engagement.

Learn more →
Mid-market

For the head of compliance, GC or CISO scaling an AI governance programme across tens of systems and multiple regulatory regimes. One platform replaces a stack of spreadsheets, vendor templates and consultancy work.

Learn more →
Enterprise

For organisations whose AI footprint moves faster than annual review cycles. Hael becomes the system of record for every AI system in the estate, used by legal, security, the AI committee, the auditor and the board.

Learn more →
Methodology

Built by regulatory practitioners, not generic compliance vendors.

Hael is built by regulatory practitioners who have authorised and supervised regulated firms under FCA, EU and US regimes since 2013. The platform reflects how regulators actually assess AI governance — not how generic compliance vendors model it.

Read our methodology →

Be ready before the deadline, not after the audit.

The EU AI Act high-risk obligations apply from December 2027. Hael puts the files, controls and coverage on record before they are asked for.