Registers¶
The living records. Registers are the evidence that governance is operating rather than merely documented — and the first thing a regulator asks for.
| Template | Status | Purpose |
|---|---|---|
| Data Asset Register | Ready | The catalogue of what data you hold, who owns it, how sensitive it is, and where it lives. Almost every other governance control depends on it. |
| AI System Inventory | Ready | The single list of every AI system you build, buy, or have embedded in something you already licence. It is the foundation of AI Act compliance: every… |
| Risk Register | Ready | The live record of data and AI risks: what could go wrong, how likely and how bad, what you are doing about it, and who owns it. |
| Issue & Incident Log | Ready | The record of what went wrong, what you did, and what changed as a result. It is both a management tool and the evidence base for serious-incident… |
| Processing & DPIA Log | Ready | The record of personal data processing activities and the impact assessments that cover them — the point where AI governance meets data protection law. |
Not sure where you stand?
Take the role-based assessment — answer questions relevant to your role and get a report showing which of these templates close your biggest gaps. Everything stays in your browser.