Important Hosting Update (13/01/25)

Mid-december, we announced that as of February 1st, 2025, ISMS Copilot would no longer offer EU-hosted conversations due to the closure of our EU provider. In the meantime, we hosted conversations in the US, with GDPR compliance ensured through Standard Contractual Clauses (SCCs) and robust data protection measures.

But, we’re happy to announce that our ability to offer 100% EU hosted assistants is finally maintained.

So, we’ll keep supporting assistance for EU regulations (DORA, NIS2, EU AI ACT, Cyber Resilience Act, GDPR), and these assistants will be hosted in the EU. This information supersedes any other information about EU hosting. We confirm as of 13/01/2025 that ISMS Copilot EU is back in the game.

For more details, please visit our FAQ for EU users.

EU AI Act Copilot Documentation

AI Trust Scorecard

Field	Value
Description	The EU AI Act Copilot is an AI-powered chatbot that helps organizations align with the European Union's Artificial Intelligence Act. It provides guidance on AI governance, ethical practices, and regulatory compliance.
Risk Classification	“Limited Risk” (EU AI Act)
Feature is Optional	No
Model Type	Retrieval-Augmented Generative (RAG LLM)
Base Model	Claude 3.5 “Sonnet”
Base Model Trained with Customer Data?	No
Customer Data Shared with Model Vendor?	No
Training Data Anonymized	N/A (no customer data used in training)
Data Deletion	Yes (requests honored where feasible)
Human in the Loop	No (user is asked to verify outputs and consult professionals)
Data Retention	90 days
Logging & Auditing	Yes (conversations logged for admin oversight)
Guardrails	Yes (preventive checks in system design, and conversation monitoring by admins)
Input/Output Consistency	Not guaranteed (LLM responses can vary)
Hosting & Data Location	100% US or 100% EU (choice is given)

About This AI System

The EU AI Act Copilot is an AI-powered chatbot that helps organizations align with the European Union's Artificial Intelligence Act. It provides guidance on AI governance, ethical practices, and regulatory compliance. As required by the EU AI Act's transparency provisions, we confirm that you are interacting with an artificial intelligence system.

Classification Under EU AI Act

Risk Classification

EU AI Act Copilot is classified as a limited risk AI system (chatbot) based on:

Intended Purpose: Provides guidance on compliance, governance, and ethical practices for AI systems in the EU.
Functionality: Delivers tailored support for implementing transparency, accountability, and risk management in AI development.
Risk Level: Functions as a limited risk chatbot, supporting compliance without affecting fundamental rights.
Decision Making: Offers advisory support while organizations retain control of compliance decisions.
Data Processing: Stores all conversation data exclusively in the EU, following strict data residency and privacy rules.

Rationale for Classification

The system does not qualify as high-risk under Article 6 and Annex III because:

It does not make decisions affecting fundamental rights.
Human oversight guides all decision-making processes.
EU data residency ensures privacy and security.