AI Compliance Tool

About This Tool

Automated AI compliance analysis against UK regulatory frameworks

The Challenge

Organisations deploying AI systems face significant compliance burdens across multiple overlapping frameworks. This creates challenges including:

  • Understanding which regulations apply to specific AI systems
  • Identifying gaps between current documentation and compliance requirements
  • Producing evidence for audits, DPIAs, and regulatory submissions
  • Keeping pace with evolving UK and EU AI governance expectations

The Solution

This tool analyses your AI procurement documents, DPIAs, and system specifications against major compliance frameworks:

  • Automated gap analysis across ICO, DPA/GDPR, EU AI Act, and ISO 42001
  • Evidence extraction with specific quotes from your documents
  • UK Alignment Score providing a weighted compliance metric
  • Priority remediation actions ranked by criticality

Key Features:

Framework Analysis

Check compliance against ICO, GDPR, EU AI Act, and ISO 42001

UK Alignment Score

Weighted metric prioritising UK regulatory requirements

Gap Detection

Identify missing evidence and documentation requirements

Report Generation

Export professional PDF reports for audits and boards

How It Works

1

Upload Document

Upload your AI system specification, DPIA, procurement document, or vendor assessment.

2

Select Frameworks

Choose which compliance frameworks to analyse against.

3

AI Analysis

Specialised modules examine your document against each framework's requirements.

4

Review Results

View scores, cross-framework issues, and download a comprehensive PDF report.

Who This Helps

Compliance Officers

Streamline AI governance assessments and produce audit-ready documentation with clear evidence trails.

Procurement Teams

Evaluate AI vendor submissions against regulatory requirements before contract award.

DPOs & IG Leads

Ensure AI systems meet data protection requirements with structured DPIA analysis.

Consultants & Auditors

Deliver consistent, framework-based AI compliance assessments for clients.

Frameworks Covered

UK ICO AI Principles

The ICO's five principles for responsible AI: safety & robustness, fairness & transparency, accountability & governance, contestability & redress, and data protection by design. Learn more →

UK DPA / GDPR

Data protection requirements for AI including Article 22 (automated decisions), Article 5 (data principles), Articles 13/14 (transparency), and Article 35 (DPIAs). Learn more →

EU AI Act

Risk classification (prohibited, high-risk, limited, minimal) and provider obligations for high-risk AI systems. Learn more →

ISO/IEC 42001:2023

AI management system requirements covering governance, risk management, data lifecycle, and monitoring. Learn more →

UK Alignment Score

The UK Alignment Score is a weighted composite metric that prioritises UK-specific frameworks:

ICO AI Principles40%
UK DPA / GDPR30%
ISO 4200120%
EU AI Act10%

This weighting reflects the regulatory priorities for UK-based organisations while maintaining visibility of international standards.

About the Developer

Paul K.

Data & AI Solutions

Paul is a Data and AI Solutions specialist focused on building data-driven applications that solve real business problems. His recent work includes enterprise AI systems for financial services, automation tools for business intelligence, and several portfolio projects demonstrating end-to-end product development.

With a BSc in Politics from the London School of Economics and experience spanning financial services, consulting, and technical implementation, Paul brings a unique blend of business acumen and technical expertise to every project. He specialises in taking complex datasets and regulatory landscapes and transforming them into actionable platforms and practical business intelligence tools.

This is a portfolio project built with Python, LangGraph, and Next.js. The application demonstrates AI-powered document analysis and multi-framework compliance assessment using Perplexity Sonar models (sonar for extraction and sonar-pro for detailed compliance analysis).