Compliance

    One control point. Evidence for every framework that matters.

    Nyx turns runtime AI governance into auditor-ready evidence — on-device k-anonymity, a tamper-evident ledger and per-framework evidence packs. Below is exactly what ships today, labelled honestly.

    EU AI Act

    Reg. (EU) 2024/1689
    Evidence pack

    High-risk obligations apply from 2 August 2026. Runtime controls plus an exportable evidence pack across Art. 9, 10, 12, 14 and 26.

    Learn more

    DORA

    Reg. (EU) 2022/2554
    Evidence pack

    AI model providers are ICT third parties. Nyx inventories them, scores their risk, and produces evidence across the five DORA pillars.

    Learn more

    NIS2

    Dir. (EU) 2022/2555
    Evidence pack

    Close the AI risk surface your SIEM doesn't see: prompt injection, LLM data exfiltration and AI supply-chain dependency.

    Learn more

    GDPR

    Reg. (EU) 2016/679
    Evidence pack

    PII is redacted on-device before it ever reaches the model. Records of processing, data minimization and a human-review path for automated decisions.

    Learn more

    ISO/IEC 42001

    ISO/IEC 42001:2023
    Evidence pack

    Operational evidence for your AI Management System (AIMS), mapped to Annex A controls A.2–A.10.

    Learn more

    Cyber Resilience Act

    Reg. (EU) 2024/2847
    Supporting evidence

    Documentary support for products with digital elements: an inventory of AI dependencies and audit trail for the security life cycle. Obligations phase in through 2027.

    SOC 2 Type II

    AICPA TSC 2017
    Evidence pack

    Trust Services Criteria evidence: access control, audit and incident management.

    Learn more

    HIPAA

    45 CFR 160/164
    Evidence pack

    PHI access logs and minimum-necessary enforcement for healthcare AI use.

    Learn more

    PCI DSS v4.0

    PCI SSC v4.0
    Evidence pack

    Cardholder-data redaction and inventory for payment-adjacent AI workflows.

    Learn more

    ISO/IEC 27001

    ISO/IEC 27001:2022
    Evidence pack

    ISMS Annex A controls evidence across the AI usage surface.

    Learn more

    What the labels mean

    Evidence packAn auditor-ready report generator ships today.
    Runtime controlsEnforcement maps to named articles at runtime.
    Supporting evidenceNyx contributes inputs; no framework-specific tooling yet.
    On roadmapDated and planned; not yet shipping.
    See how Nyx covers your regulatory obligations — request a demo

    The information on this page is for informational purposes and does not constitute legal advice. For an assessment specific to your organization, consult a qualified professional. Nyx reports are evidence packs — control, requirement, metrics and reasoning — not a compliance verdict.