Governance and regulation
Data handling, transparency and risk rules that shape enterprise AI deployments.
Changes fast: check the latest updates too. Reviewed 17 Oct 2026.
Key ideas
- EU AI Act: risk-based obligations; general-purpose AI obligations applied from August 2025, most high-risk obligations phase in from 2026 onward. Check current timelines.
- Data residency and retention: know where prompts and logs are stored and for how long.
- Document models, data sources, evals and known limitations (model or system cards).
- ISO/IEC 42001 is the AI management system standard many enterprises ask about.