Compliance isn't a tax we pay. It's the architecture.
Sensitive content stays on the device. Rules determine which processing is permitted for which content. Nothing is left to chance.
EVIDENCE · Rules, not chance: documented processing boundaries.
No invasive step without approval; pilot → review → the rest.
EVIDENCE · A traceable approval chain for each step that requires approval.
The Repertadata Vault Controller documents the controlled workflows: where your data is processed, which tools are used and which approvals apply.
EVIDENCE · Logs show how a result was produced.
GDPR data minimisation as the requirement, GoBD traceability for tax-relevant documents, the EU AI Act and ISO/IEC 42001 as the frame of reference. Built in from the start, not retrofitted.
EVIDENCE · Built in from the start, not retrofitted.
Mapping the regulatory framework.
FRAME OF REFERENCE · NO CERTIFICATION CLAIMED
A real-world archive grown over almost two decades, several thousand documents and notes, was processed locally on our own archive: 100% metadata coverage1,0 sensitive items in the cloud, 0 data losses2, an unbroken audit trail.
1 4,695 notes with standardised metadata. 1,627 PDFs processed, 13.3 million characters indexed.
2 1,278 notes filed after human review without data loss.
Frequently asked questions about governance.
Which AI tools are GDPR-compliant?
What matters is where processing takes place, its legal basis and whether it can be evidenced. An EU data centre alone is not enough without logs and deletion policies.
What does the EU AI Act mean for SMEs?
The obligations take effect in stages: prohibitions, AI literacy requirements and transparency rules already apply. The EU’s 2026 Omnibus Regulation has moved obligations for high-risk systems to later stages. Which stage applies to you depends on your role and use case. We establish this in the Audit and provide the supporting logs.
Is this audit-proof?
Repertadata makes processes and results traceable. Audit-proof record keeping arises from the interplay of technology, organisation and documented procedures.