Hael Counsel
Ask your governance anything. Answered from your own record.
Hael Counsel — your AI governance copilot — answers from your live record and the obligations mapped to it, with every answer cited to the record, control and owner behind it.
Hael Counsel · answered from your record
Session · live
Question
Which of our systems are affected by the EU AI Act Annex III changes?
Answer
Three systems on your registry fall under Annex III(5): AGT-014, UND-014 and FRD-021. Two have current Annex IV files; FRD-021 is held open pending a residual-risk attestation from Risk Operations.
RecordAGT-014 · Customer Decisioning AgentOwner · AI Governance
ControlISO 42001 §8.4 · residual risk reviewMapped · M. Okafor
OpenFRD-021 · REQ-04812 attestationRisk Operations
Insufficient contextCHT-031 has no mapped jurisdiction. Counsel will not infer one — the registry needs the owner to set it.
Grounded in your record · never used to train shared modelsCited
The problem
General AI tools cannot answer for your governance.
A general model guesses from public text. It does not know which systems you run, which obligations apply, or who signed off.
Counsel does — because it reads your record. Where the record is silent, it says so rather than inventing.
General assistant
"EU AI Act Annex III likely covers a number of common AI uses, such as credit scoring, recruitment, and biometric ID…"
— No knowledge of your systems
— No citation to anything you own
— No idea who is accountable
Counsel
"AGT-014, UND-014 and FRD-021 fall under Annex III(5). Two have current files. FRD-021 is held open on REQ-04812."
ReadsYour registry
CitesRecord · control · owner
RefusesAnything the record cannot support
How it works
Three things Counsel does that a general assistant cannot.
01
Grounded answers
Every response is drawn from your records and obligations, with citations. Where the record is silent, Counsel says so rather than inventing.
Residual risk is reviewed weekly, with quarterly sign-off.
↳ AGT-014 · M. Okafor (GC)
02
Use-case intake
Paste a product brief; Counsel drafts the registry entry — purpose, data, model, vendor, jurisdictions — with confidence flags and gaps marked. Your team confirms before anything is created.
PurposeCredit-limit decisionsConfident
DataPII · financialConfident
VendorAnthropic · ClaudeConfident
JurisdictionsSet on confirmGap
03
Risk-matched controls
For a system, Counsel maps risks to mitigating controls from the framework library, names the governing obligation, and flags where no control yet exists. It suggests; your team assigns.
Residual model risk
ISO 42001 §8.4
Human oversight
AI Act Art. 14
Bias monitoring
— no control yet
Counsel · access path
Counsel
→Read · cite · suggest
Governance record
Read-only
Writes happen only through the standard review path — owner proposes, reviewer approves, audit chain records. Counsel sees the result like any other reader.
14:32Counselasked · Annex III impact
14:32Counselcited · AGT-014, UND-014, FRD-021
14:34M. Okaforopened · FRD-021 attestation
Through-line
It reads the record. It never overwrites it.
Counsel retrieves only your organisation's records and answers over them. It drafts and suggests; every write is a human decision through the normal review path.
Counsel's own questions and answers are logged — governance for the governance assistant.
Proof & privacy
Grounded, cited, and private.
Every answer carries its citation trail. Every session is tenant-isolated. No prompt, no record and no document is used to train shared models.
Answer · with citation trail
Tenant-isolated
Question
Is FRD-021 disclosable on the trust centre today?
AnswerNo. FRD-021 is high-risk under Annex III(5) with residual-risk attestation outstanding. Disclosure is held until General Counsel signs off.
Insufficient contextNo cadence is on record for FRD-021. Counsel will not estimate one.
Citations
Record
FRD-021 · Fraud Scoring Model
Owner · S. Iqbal (CDO)
Obligation
EU AI Act · Annex III(5)
Statute · canonical
Control
ISO 42001 §8.4 · residual risk
Mapped · M. Okafor
Open
REQ-04812 · attestation
Risk Operations
Your data is isolated to your tenant and never used to train shared models.
Session ev-9412 · audit chain verifiedCited