Produced with model assistance. Every page on this site, and every document in the dev packs area, was drafted with a large language model and reviewed by a person before publication. Nothing on this site is a compliance assessment, and no page claims conformity to any standard. What we do not say, and why · how every claim here is evidenced

store.sgit.ai / who you are / Risk and governance

You own the register

The mapping, and what the store refuses to claim about it. Nothing here is a compliance assessment and nothing claims conformity to any standard — what exists is a document that can be cited a row of.

You arrive askingWhere does this sit against the frameworks we already report on?

The one that fits

3

Corrected for your situation

Your deployment is not the template, and you would rather not do the correcting.

£5001 to 3 days

You tell us the industry, the use case and the details. The mandate is corrected against them and the vault comes back yours.

delivered by a person

The payment link has not been issued yetWhat arrives, and what does not →

A corrected mandate is the version that can go on a register, because the assumptions in it are yours and the delta is computed against them rather than against a starting guess.

What changes for you

The mapping, and what the store refuses to claim about it. Nothing here is a compliance assessment and nothing claims conformity to any standard — what exists is a document that can be cited a row of.

The rest of the ladder

Nothing is hidden from anybody. These are the same four levels every reader of this store sees; what the page above does is open on the one that usually fits the question you arrived with. If it is the wrong one, it is right here.

1

The pack, downloaded

You want the material and you do not want to run anything.

£10Immediately

Every file in the vault, downloaded by you. Yours to use, keep and hand to your agent.

exists and runs

The payment link has not been issued yetWhat arrives, and what does not →

2

A working vault

You want the thing itself rather than a copy of its contents.

£501 to 2 days

The same material as a vault you hold the keys to: clone it, change it, version it, and hand anyone a read key.

exists and runs

The payment link has not been issued yetWhat arrives, and what does not →

4

Two sessions and a custom vault

The answer has to survive somebody else asking about it.

£1,5001 to 5 days

Half an hour with your team to find out what is actually running, and half an hour to deliver it — reviewed and signed off by a security professional.

delivered by a person

The payment link has not been issued yetWhat arrives, and what does not →

Go and look at one first

A regulation parsed into a graph you can cite a row of, hash-verified to the official source bytes. What a mapping looks like when it is done properly.

Regulation Graph73heuprz · 14.9 MB, 207 files · 20 August 2026

“The EU AI Act parsed from Formex into an evidence graph, article by article”

Regulation (EU) 2024/1689 as something you can cite a row of, hash-verified to the official source bytes. What a mapping to a standard looks like when it is done properly.

It opens with a read key published on its own page — no account, nothing to install, and nothing asked of you for looking. Five more like it · the other four ways in.