Skip to main content

Transparency

Self-Assessment

VODR Organism's own regulatory compliance posture. Updated with each material change. This is not legal certification — it is honest disclosure.

Constitutional Commitment

Why this page exists

VODR Organism is a regulatory intelligence tool. It assesses other AI systems against applicable regulatory frameworks. It is itself an AI system subject to those same frameworks. This page discloses how VODR Organism assesses its own compliance posture — the same way it assesses yours.

This is not a legal certification. It is not an audit report. It is an honest disclosure of what we track, what we've completed, what we're working on, and what we don't yet know. The product that publishes its own gaps honestly is the product worth trusting.

EU AI Act Classification

Risk classification

Assessment: VODR Organism is classified as a General Purpose AI system subject to transparency obligations under EU AI Act Article 13. It does not fall within Annex III high-risk categories. It does not make decisions affecting individuals' fundamental rights. It provides reference data for human professionals to use as one input among many.

Role: Vodr is a provider of an AI system. Customers who integrate VODR Organism into their own compliance workflows are deployers and bear their own deployer obligations under the EU AI Act.

Confidence: This classification reflects our current assessment. We will update it if enforcement guidance changes this determination.

Compliance Posture

Current status by domain

RequirementFrameworkStatusNotes
Transparency disclosureEU AI Act Art. 13CompleteThis page. Terms of Service Section 1.4.
No legal advice disclaimerEU AI Act · GeneralCompleteTerms Section 2. Displayed at point of use on homepage.
Data minimizationGDPR Art. 5(1)(c)CompleteSystem descriptions processed to generate classification results only. Not retained beyond subscription period.
Privacy PolicyGDPR Art. 13/14Completevodr.ai/privacy. Reviewed against Article 13 requirements.
Sub-processor disclosureGDPR Art. 28Completevodr.ai/sub-processors. Named list with data processing roles.
DPA availabilityGDPR Art. 28CompleteAvailable on request: privacy@vodr.ai.
Terms of ServiceGeneralCompletevodr.ai/terms. Includes acceptable use, liability limitations, arbitration.
EU/EEA arbitration carve-outGDPR · EU Consumer LawCompleteTerms Section 13.3. EU users retain right to local courts and DPA complaints.
Right to object to legitimate interest processingGDPR Art. 21CompletePrivacy Policy Section 4 and 10.1.
Data portability format specifiedGDPR Art. 20CompletePrivacy Policy Section 10.1 — JSON or CSV.
Accuracy disclaimer at point of useEU AI Act · GeneralCompleteDisplayed below classify input on homepage.
Incident response planNIS2 · GeneralIn progressInternal plan drafted. Not yet formally documented and tested.
Vulnerability disclosure processCRA Art. 13In progressprivacy@vodr.ai currently accepts reports. Formal VDP page pending.
Conformity assessmentEU AI Act Art. 43Not applicableNot required for General Purpose AI systems below high-risk threshold.
CE markingEU AI ActNot applicableNot required until high-risk classification or GPAI model designation.

What We Don't Know

Open questions

The EU AI Act enforcement guidance on General Purpose AI systems is still developing. The following are open questions we are monitoring:

We will update this page when guidance or enforcement practice clarifies these questions.

Version History

Changes to this assessment

DateChange
2026-03-27Initial publication. Baseline assessment against EU AI Act, GDPR, NIS2, CRA.
136 frameworks · 3,137 requirements · 23 extractors. Mapped to your code.