{"data":[{"slug":"ai-system-inventory","title":"AI System Inventory","type":"register","formats":["xlsx","docx"],"topics":["inventory","governance","evidence"],"frameworks":["eu-ai-act","iso-42001","nist-ai-rmf"],"short":"One row per AI system: purpose, role under the law, jurisdictions, risk tier, data, owner and review dates, with the recorded duties for each role on a reference sheet.","covers":{"categories":["governance_accountability","technical_documentation","record_keeping"]},"version":6,"dataset_version":"4559f86f527b","generated_at":"2026-10-16T05:30:00+00:00","citations":199,"downloads":34,"files":[{"format":"xlsx","filename":"ai-system-inventory-v6.xlsx","bytes":65614,"url":"https://aipolicytracker.org/templates/ai-system-inventory#download"},{"format":"docx","filename":"ai-system-inventory-v6.docx","bytes":14153,"url":"https://aipolicytracker.org/templates/ai-system-inventory#download"}],"url":"https://aipolicytracker.org/templates/ai-system-inventory"},{"slug":"ai-risk-register","title":"AI Risk Register (MIT AI Risk Repository taxonomy)","type":"register","formats":["xlsx"],"topics":["risk","governance","evidence"],"frameworks":["nist-ai-rmf","iso-42001","eu-ai-act"],"short":"A risk register whose domain and subdomain dropdowns are the MIT AI Risk Repository taxonomy, with inherent and residual scoring, control lookup and colour-coded thresholds.","covers":{"categories":["risk_management","safety_testing"]},"version":4,"dataset_version":"1e8ea28a8a93","generated_at":"2026-10-09T05:30:00+00:00","citations":36,"downloads":3,"files":[{"format":"xlsx","filename":"ai-risk-register-v4.xlsx","bytes":49513,"url":"https://aipolicytracker.org/templates/ai-risk-register#download"}],"url":"https://aipolicytracker.org/templates/ai-risk-register"},{"slug":"eu-ai-act-role-risk-classifier","title":"EU AI Act Role and Risk Classifier","type":"checklist","formats":["xlsx"],"topics":["inventory","risk","governance"],"frameworks":["eu-ai-act"],"short":"Answer six questions per system and the sheet returns the role, the risk tier and the date its duties apply, looked up from the dated milestones on the EU AI Act record.","covers":{"policies":["eu-ai-act"]},"version":4,"dataset_version":"52bd836b1d6b","generated_at":"2026-10-08T05:30:01+00:00","citations":53,"downloads":3,"files":[{"format":"xlsx","filename":"eu-ai-act-role-risk-classifier-v4.xlsx","bytes":44682,"url":"https://aipolicytracker.org/templates/eu-ai-act-role-risk-classifier#download"}],"url":"https://aipolicytracker.org/templates/eu-ai-act-role-risk-classifier"},{"slug":"fundamental-rights-impact-assessment","title":"Fundamental Rights Impact Assessment (FRIA)","type":"assessment","formats":["docx","xlsx"],"topics":["risk","oversight","evidence"],"frameworks":["eu-ai-act"],"short":"The assessment Article 27 of the EU AI Act requires of deployers of high-risk AI: one section per element the article names, with placeholders, plus a register to track completed assessments.","covers":{"categories":["impact_assessment"]},"version":5,"dataset_version":"4559f86f527b","generated_at":"2026-10-16T05:30:02+00:00","citations":7,"downloads":14,"files":[{"format":"docx","filename":"fundamental-rights-impact-assessment-v5.docx","bytes":11059,"url":"https://aipolicytracker.org/templates/fundamental-rights-impact-assessment#download"},{"format":"xlsx","filename":"fundamental-rights-impact-assessment-v5.xlsx","bytes":16595,"url":"https://aipolicytracker.org/templates/fundamental-rights-impact-assessment#download"}],"url":"https://aipolicytracker.org/templates/fundamental-rights-impact-assessment"},{"slug":"ai-impact-assessment","title":"AI Impact Assessment","type":"assessment","formats":["docx","xlsx"],"topics":["risk","governance","evidence"],"frameworks":["nist-ai-rmf","iso-42001","colorado-ai-act"],"short":"A general impact assessment for any AI system: purpose, affected people, harms by risk domain, mitigations and the decision, with the impact-assessment duties recorded across jurisdictions as the checklist.","covers":{"categories":["impact_assessment","risk_management"]},"version":5,"dataset_version":"4559f86f527b","generated_at":"2026-10-16T05:30:02+00:00","citations":12,"downloads":9,"files":[{"format":"docx","filename":"ai-impact-assessment-v5.docx","bytes":12210,"url":"https://aipolicytracker.org/templates/ai-impact-assessment#download"},{"format":"xlsx","filename":"ai-impact-assessment-v5.xlsx","bytes":17822,"url":"https://aipolicytracker.org/templates/ai-impact-assessment#download"}],"url":"https://aipolicytracker.org/templates/ai-impact-assessment"},{"slug":"acceptable-use-policy","title":"AI Acceptable Use Policy","type":"policy","formats":["docx"],"topics":["governance","transparency"],"frameworks":["eu-ai-act","iso-42001"],"short":"A policy for staff use of AI tools: permitted and prohibited uses, data handling, disclosure and reporting, with the prohibited practices drawn from the law.","covers":{"categories":["prohibited_practice","ai_literacy","governance_accountability"]},"version":1,"dataset_version":"7c0835db52c1","generated_at":"2026-09-26T13:11:01+00:00","citations":6,"downloads":4,"files":[{"format":"docx","filename":"acceptable-use-policy-v1.docx","bytes":13654,"url":"https://aipolicytracker.org/templates/acceptable-use-policy#download"}],"url":"https://aipolicytracker.org/templates/acceptable-use-policy"},{"slug":"ai-governance-policy-raci","title":"AI Governance Policy and RACI","type":"policy","formats":["docx","xlsx"],"topics":["governance","evidence"],"frameworks":["iso-42001","nist-ai-rmf","eu-ai-act"],"short":"The governance policy an AI management system needs, built from the recorded governance duties, with a RACI matrix over every recorded control.","covers":{"categories":["governance_accountability","quality_management"]},"version":5,"dataset_version":"4559f86f527b","generated_at":"2026-10-16T05:30:02+00:00","citations":92,"downloads":11,"files":[{"format":"docx","filename":"ai-governance-policy-raci-v5.docx","bytes":20698,"url":"https://aipolicytracker.org/templates/ai-governance-policy-raci#download"},{"format":"xlsx","filename":"ai-governance-policy-raci-v5.xlsx","bytes":30879,"url":"https://aipolicytracker.org/templates/ai-governance-policy-raci#download"}],"url":"https://aipolicytracker.org/templates/ai-governance-policy-raci"},{"slug":"ai-vendor-due-diligence-questionnaire","title":"AI Vendor Due-Diligence Questionnaire","type":"checklist","formats":["xlsx","docx"],"topics":["vendors","governance","evidence"],"frameworks":["eu-ai-act","iso-42001","nist-ai-rmf"],"short":"Questions to put to an AI vendor, grouped by governance, data, model, security, transparency, incidents, and insurance and indemnity, scored automatically.","covers":{"categories":["vendor_governance"]},"version":3,"dataset_version":"52bd836b1d6b","generated_at":"2026-10-08T05:30:01+00:00","citations":6,"downloads":6,"files":[{"format":"xlsx","filename":"ai-vendor-due-diligence-questionnaire-v3.xlsx","bytes":15376,"url":"https://aipolicytracker.org/templates/ai-vendor-due-diligence-questionnaire#download"},{"format":"docx","filename":"ai-vendor-due-diligence-questionnaire-v3.docx","bytes":11308,"url":"https://aipolicytracker.org/templates/ai-vendor-due-diligence-questionnaire#download"}],"url":"https://aipolicytracker.org/templates/ai-vendor-due-diligence-questionnaire"},{"slug":"human-oversight-procedure","title":"Human Oversight Procedure","type":"procedure","formats":["docx","xlsx"],"topics":["oversight","governance"],"frameworks":["eu-ai-act","colorado-ai-act"],"short":"A procedure for the humans who oversee an AI system: what they must be able to do, when they intervene, how an override is recorded, drawn from every recorded oversight duty.","covers":{"categories":["human_oversight"]},"version":5,"dataset_version":"4559f86f527b","generated_at":"2026-10-16T05:30:02+00:00","citations":18,"downloads":4,"files":[{"format":"docx","filename":"human-oversight-procedure-v5.docx","bytes":13680,"url":"https://aipolicytracker.org/templates/human-oversight-procedure#download"},{"format":"xlsx","filename":"human-oversight-procedure-v5.xlsx","bytes":21977,"url":"https://aipolicytracker.org/templates/human-oversight-procedure#download"}],"url":"https://aipolicytracker.org/templates/human-oversight-procedure"},{"slug":"ai-incident-response-playbook","title":"AI Incident Response Playbook and Log","type":"procedure","formats":["docx","xlsx"],"topics":["incidents","governance","evidence"],"frameworks":["eu-ai-act","nist-ai-rmf"],"short":"Detect, contain, report and learn: a playbook built from the recorded incident-handling duties, with the reporting deadlines they set, and a log that computes them.","covers":{"categories":["incident_handling","post_market_monitoring"]},"version":3,"dataset_version":"52bd836b1d6b","generated_at":"2026-10-08T05:30:01+00:00","citations":252,"downloads":5,"files":[{"format":"docx","filename":"ai-incident-response-playbook-v3.docx","bytes":13663,"url":"https://aipolicytracker.org/templates/ai-incident-response-playbook#download"},{"format":"xlsx","filename":"ai-incident-response-playbook-v3.xlsx","bytes":56850,"url":"https://aipolicytracker.org/templates/ai-incident-response-playbook#download"}],"url":"https://aipolicytracker.org/templates/ai-incident-response-playbook"},{"slug":"ai-agent-registry","title":"AI Agent Registry and Permission Matrix","type":"register","formats":["xlsx","docx"],"topics":["inventory","oversight","governance"],"frameworks":["eu-ai-act","nist-ai-rmf"],"short":"A register for agents that act — with tools, credentials and autonomy — and a permission matrix stating what each may do alone, with approval, or never.","covers":{"categories":["human_oversight","transparency","record_keeping"]},"version":6,"dataset_version":"4559f86f527b","generated_at":"2026-10-16T05:30:03+00:00","citations":43,"downloads":4,"files":[{"format":"xlsx","filename":"ai-agent-registry-v6.xlsx","bytes":31404,"url":"https://aipolicytracker.org/templates/ai-agent-registry#download"},{"format":"docx","filename":"ai-agent-registry-v6.docx","bytes":12802,"url":"https://aipolicytracker.org/templates/ai-agent-registry#download"}],"url":"https://aipolicytracker.org/templates/ai-agent-registry"},{"slug":"article-50-transparency-kit","title":"EU AI Act Article 50 Transparency Kit","type":"kit","formats":["docx","xlsx"],"topics":["transparency","evidence"],"frameworks":["eu-ai-act"],"short":"Notice texts and a checklist for the transparency duties of Article 50: chatbot disclosure, synthetic content marking, deepfake and emotion-recognition notices, with the application date from the record.","covers":{"categories":["transparency"],"policies":["eu-ai-act"]},"version":33,"dataset_version":"b92af3db4bf2","generated_at":"2026-10-28T05:30:00+00:00","citations":16,"downloads":5,"files":[{"format":"docx","filename":"article-50-transparency-kit-v33.docx","bytes":11716,"url":"https://aipolicytracker.org/templates/article-50-transparency-kit#download"},{"format":"xlsx","filename":"article-50-transparency-kit-v33.xlsx","bytes":15638,"url":"https://aipolicytracker.org/templates/article-50-transparency-kit#download"}],"url":"https://aipolicytracker.org/templates/article-50-transparency-kit"},{"slug":"iso-42001-gap-assessment","title":"ISO/IEC 42001 Gap Assessment and Statement of Applicability","type":"assessment","formats":["xlsx"],"topics":["governance","evidence"],"frameworks":["iso-42001"],"short":"Every ISO/IEC 42001 clause and control the records map to, with the legal duties behind each, applicability, implementation status and evidence, in the form a Statement of Applicability takes.","covers":{"frameworks":["iso-42001"]},"version":3,"dataset_version":"1e8ea28a8a93","generated_at":"2026-10-09T05:30:01+00:00","citations":26,"downloads":2,"files":[{"format":"xlsx","filename":"iso-42001-gap-assessment-v3.xlsx","bytes":29477,"url":"https://aipolicytracker.org/templates/iso-42001-gap-assessment#download"}],"url":"https://aipolicytracker.org/templates/iso-42001-gap-assessment"},{"slug":"nist-eu-iso-crosswalk","title":"NIST AI RMF ↔ EU AI Act ↔ ISO/IEC 42001 Crosswalk","type":"crosswalk","formats":["xlsx"],"topics":["governance","evidence"],"frameworks":["nist-ai-rmf","eu-ai-act","iso-42001"],"short":"Every recorded legal duty against the NIST AI RMF and ISO/IEC 42001 references it maps to, with the confidence of each mapping, so what is done for one counts for the others.","covers":{"frameworks":["nist-ai-rmf","iso-42001"]},"version":3,"dataset_version":"1e8ea28a8a93","generated_at":"2026-10-09T05:30:02+00:00","citations":98,"downloads":7,"files":[{"format":"xlsx","filename":"nist-eu-iso-crosswalk-v3.xlsx","bytes":36729,"url":"https://aipolicytracker.org/templates/nist-eu-iso-crosswalk#download"}],"url":"https://aipolicytracker.org/templates/nist-eu-iso-crosswalk"},{"slug":"colorado-ai-act-notices","title":"Colorado ADMT Law (SB 26-189) Notices","type":"kit","formats":["docx","xlsx"],"topics":["transparency","evidence"],"frameworks":["colorado-ai-act"],"short":"The notices Colorado's SB 26-189 requires when automated decision-making technology influences a consequential decision: advance notice, adverse-decision disclosure, human review, record keeping and developer documentation, built from the recorded duties.","covers":{"policies":["us-colorado-automated-decision-making-technology-act"]},"version":3,"dataset_version":"051ce01569fc","generated_at":"2026-09-29T05:30:00+00:00","citations":12,"downloads":4,"files":[{"format":"docx","filename":"colorado-ai-act-notices-v3.docx","bytes":11634,"url":"https://aipolicytracker.org/templates/colorado-ai-act-notices#download"},{"format":"xlsx","filename":"colorado-ai-act-notices-v3.xlsx","bytes":12846,"url":"https://aipolicytracker.org/templates/colorado-ai-act-notices#download"}],"url":"https://aipolicytracker.org/templates/colorado-ai-act-notices"},{"slug":"ai-workforce-impact-assessment","title":"AI Workforce Impact Assessment","type":"assessment","formats":["docx","xlsx"],"topics":["workforce","governance"],"frameworks":["nist-ai-rmf"],"short":"An assessment of what an AI deployment does to jobs: roles affected, tasks automated, timeline, consultation, reskilling and disclosure, with a role inventory sheet.","covers":{"categories":["impact_assessment","public_sector_use"]},"version":1,"dataset_version":"914895c3103e","generated_at":"2026-09-26T13:05:09+00:00","citations":0,"downloads":2,"files":[{"format":"docx","filename":"ai-workforce-impact-assessment-v1.docx","bytes":10331,"url":"https://aipolicytracker.org/templates/ai-workforce-impact-assessment#download"},{"format":"xlsx","filename":"ai-workforce-impact-assessment-v1.xlsx","bytes":17941,"url":"https://aipolicytracker.org/templates/ai-workforce-impact-assessment#download"}],"url":"https://aipolicytracker.org/templates/ai-workforce-impact-assessment"},{"slug":"ai-system-technical-documentation","title":"AI System Technical Documentation","type":"kit","formats":["docx","xlsx"],"topics":["evidence","inventory"],"frameworks":["eu-ai-act","iso-42001"],"short":"The technical file a high-risk system needs: one section per element the recorded documentation duties name, with placeholders, plus a document register.","covers":{"categories":["technical_documentation","record_keeping","accuracy_robustness_security"]},"version":3,"dataset_version":"52bd836b1d6b","generated_at":"2026-10-08T05:30:02+00:00","citations":21,"downloads":12,"files":[{"format":"docx","filename":"ai-system-technical-documentation-v3.docx","bytes":14325,"url":"https://aipolicytracker.org/templates/ai-system-technical-documentation#download"},{"format":"xlsx","filename":"ai-system-technical-documentation-v3.xlsx","bytes":18887,"url":"https://aipolicytracker.org/templates/ai-system-technical-documentation#download"}],"url":"https://aipolicytracker.org/templates/ai-system-technical-documentation"},{"slug":"global-ai-regulatory-applicability-matrix","title":"Global AI Regulatory Applicability Matrix","type":"crosswalk","formats":["xlsx"],"topics":["inventory","governance"],"frameworks":["eu-ai-act","colorado-ai-act"],"short":"Every binding AI instrument on record, by jurisdiction, with status, application date, who it binds and the use cases it covers, as a matrix to mark which apply to you.","covers":{"categories":["governance_accountability"]},"version":4,"dataset_version":"4559f86f527b","generated_at":"2026-10-16T05:30:04+00:00","citations":103,"downloads":4,"files":[{"format":"xlsx","filename":"global-ai-regulatory-applicability-matrix-v4.xlsx","bytes":32141,"url":"https://aipolicytracker.org/templates/global-ai-regulatory-applicability-matrix#download"}],"url":"https://aipolicytracker.org/templates/global-ai-regulatory-applicability-matrix"},{"slug":"ai-model-card","title":"AI Model Card","type":"kit","formats":["docx","xlsx"],"topics":["transparency","evidence"],"frameworks":["eu-ai-act","iso-42001","nist-ai-rmf"],"short":"A model or system card: intended use, out-of-scope uses, data, evaluation results by group, risks, oversight and monitoring, with the documentation and transparency duties it helps evidence.","covers":{"categories":["technical_documentation","transparency","record_keeping"]},"version":4,"dataset_version":"1e8ea28a8a93","generated_at":"2026-10-09T05:30:03+00:00","citations":34,"downloads":0,"files":[{"format":"docx","filename":"ai-model-card-v4.docx","bytes":12074,"url":"https://aipolicytracker.org/templates/ai-model-card#download"},{"format":"xlsx","filename":"ai-model-card-v4.xlsx","bytes":22879,"url":"https://aipolicytracker.org/templates/ai-model-card#download"}],"url":"https://aipolicytracker.org/templates/ai-model-card"},{"slug":"ai-data-governance-register","title":"AI Data Governance Register","type":"register","formats":["xlsx","docx"],"topics":["governance","evidence"],"frameworks":["eu-ai-act","iso-42001"],"short":"One row per dataset that trains, tests or feeds an AI system: provenance, personal data, lawful basis or licence, bias checks and retention, with a procedure and the data duties on record.","covers":{"categories":["data_governance","privacy_data_protection","copyright_training_data"]},"version":3,"dataset_version":"4559f86f527b","generated_at":"2026-10-16T05:30:04+00:00","citations":13,"downloads":0,"files":[{"format":"xlsx","filename":"ai-data-governance-register-v3.xlsx","bytes":21814,"url":"https://aipolicytracker.org/templates/ai-data-governance-register#download"},{"format":"docx","filename":"ai-data-governance-register-v3.docx","bytes":11625,"url":"https://aipolicytracker.org/templates/ai-data-governance-register#download"}],"url":"https://aipolicytracker.org/templates/ai-data-governance-register"},{"slug":"ai-audit-evidence-tracker","title":"AI Audit Evidence Tracker","type":"register","formats":["xlsx"],"topics":["evidence","governance"],"frameworks":["iso-42001","nist-ai-rmf","eu-ai-act"],"short":"Every piece of evidence the recorded controls expect, one row each, with owner, status, location and review date, so an audit or certification starts from a complete list.","covers":{"frameworks":["iso-42001","nist-ai-rmf"]},"version":1,"dataset_version":"bb068ecd9dad","generated_at":"2026-09-28T10:04:00+00:00","citations":105,"downloads":2,"files":[{"format":"xlsx","filename":"ai-audit-evidence-tracker-v1.xlsx","bytes":23438,"url":"https://aipolicytracker.org/templates/ai-audit-evidence-tracker#download"}],"url":"https://aipolicytracker.org/templates/ai-audit-evidence-tracker"},{"slug":"ai-literacy-training-plan","title":"AI Literacy and Training Plan","type":"procedure","formats":["xlsx","docx"],"topics":["workforce","governance"],"frameworks":["eu-ai-act"],"short":"A role-based AI literacy plan: who needs which level of training, in what format, by when, with a coverage formula and the literacy and oversight duties on record.","covers":{"categories":["ai_literacy","human_oversight"]},"version":4,"dataset_version":"4559f86f527b","generated_at":"2026-10-16T05:30:05+00:00","citations":11,"downloads":3,"files":[{"format":"xlsx","filename":"ai-literacy-training-plan-v4.xlsx","bytes":19734,"url":"https://aipolicytracker.org/templates/ai-literacy-training-plan#download"},{"format":"docx","filename":"ai-literacy-training-plan-v4.docx","bytes":10425,"url":"https://aipolicytracker.org/templates/ai-literacy-training-plan#download"}],"url":"https://aipolicytracker.org/templates/ai-literacy-training-plan"},{"slug":"ai-post-market-monitoring-plan","title":"AI Post-Market Monitoring Plan","type":"procedure","formats":["docx","xlsx"],"topics":["risk","incidents","evidence"],"frameworks":["eu-ai-act","iso-42001"],"short":"How a deployed AI system is watched after release: metrics, thresholds, frequency, owners and escalation to incident response, with the monitoring and incident duties on record.","covers":{"categories":["post_market_monitoring","incident_handling"]},"version":2,"dataset_version":"52bd836b1d6b","generated_at":"2026-10-08T05:30:02+00:00","citations":14,"downloads":2,"files":[{"format":"docx","filename":"ai-post-market-monitoring-plan-v2.docx","bytes":12492,"url":"https://aipolicytracker.org/templates/ai-post-market-monitoring-plan#download"},{"format":"xlsx","filename":"ai-post-market-monitoring-plan-v2.xlsx","bytes":16227,"url":"https://aipolicytracker.org/templates/ai-post-market-monitoring-plan#download"}],"url":"https://aipolicytracker.org/templates/ai-post-market-monitoring-plan"},{"slug":"ai-contract-clauses","title":"AI Contract Clause Library","type":"policy","formats":["docx","xlsx"],"topics":["vendors","governance"],"frameworks":["eu-ai-act"],"short":"Nine contract clauses for buying or supplying AI: documentation, data use, testing, incidents, changes, oversight, audit and the allocation of regulatory roles, each tied to the duty it allocates.","covers":{"categories":["vendor_governance"]},"version":2,"dataset_version":"52bd836b1d6b","generated_at":"2026-10-08T05:30:02+00:00","citations":15,"downloads":0,"files":[{"format":"docx","filename":"ai-contract-clauses-v2.docx","bytes":11987,"url":"https://aipolicytracker.org/templates/ai-contract-clauses#download"},{"format":"xlsx","filename":"ai-contract-clauses-v2.xlsx","bytes":14797,"url":"https://aipolicytracker.org/templates/ai-contract-clauses#download"}],"url":"https://aipolicytracker.org/templates/ai-contract-clauses"},{"slug":"ai-red-team-test-plan","title":"AI Red-Team and Evaluation Test Plan","type":"assessment","formats":["xlsx","docx"],"topics":["risk","evidence"],"frameworks":["eu-ai-act","nist-ai-rmf"],"short":"A test plan and case log for adversarial and evaluation testing: accuracy, robustness, prompt injection, bias, harmful content, privacy leakage and misuse, with severity and retest tracking.","covers":{"categories":["safety_testing","accuracy_robustness_security"]},"version":3,"dataset_version":"1e8ea28a8a93","generated_at":"2026-10-09T05:30:03+00:00","citations":16,"downloads":6,"files":[{"format":"xlsx","filename":"ai-red-team-test-plan-v3.xlsx","bytes":19040,"url":"https://aipolicytracker.org/templates/ai-red-team-test-plan#download"},{"format":"docx","filename":"ai-red-team-test-plan-v3.docx","bytes":13176,"url":"https://aipolicytracker.org/templates/ai-red-team-test-plan#download"}],"url":"https://aipolicytracker.org/templates/ai-red-team-test-plan"},{"slug":"ai-board-reporting-pack","title":"AI Governance Board Reporting Pack","type":"kit","formats":["xlsx","docx"],"topics":["governance","risk"],"frameworks":["iso-42001","nist-ai-rmf"],"short":"A quarterly board report on AI: a dashboard of eight measures, the regulatory deadlines ahead from the records, and a report outline ending in the decisions the board is asked to take.","covers":{"categories":["governance_accountability"]},"version":4,"dataset_version":"4559f86f527b","generated_at":"2026-10-16T05:30:05+00:00","citations":49,"downloads":8,"files":[{"format":"xlsx","filename":"ai-board-reporting-pack-v4.xlsx","bytes":24480,"url":"https://aipolicytracker.org/templates/ai-board-reporting-pack#download"},{"format":"docx","filename":"ai-board-reporting-pack-v4.docx","bytes":10132,"url":"https://aipolicytracker.org/templates/ai-board-reporting-pack#download"}],"url":"https://aipolicytracker.org/templates/ai-board-reporting-pack"},{"slug":"high-risk-deployer-compliance-pack","title":"EU AI Act High-Risk Deployer Compliance Pack","type":"checklist","formats":["xlsx","docx"],"topics":["oversight","transparency","governance"],"frameworks":["eu-ai-act"],"short":"For organisations using a high-risk AI system: every recorded EU AI Act deployer duty as a per-system checklist, a log of notices to workers and affected people, notice templates and the dates that apply.","covers":{"policies":["eu-ai-act"],"categories":["human_oversight","transparency"]},"version":24,"dataset_version":"b92af3db4bf2","generated_at":"2026-10-28T05:30:01+00:00","citations":69,"downloads":0,"files":[{"format":"xlsx","filename":"high-risk-deployer-compliance-pack-v24.xlsx","bytes":26835,"url":"https://aipolicytracker.org/templates/high-risk-deployer-compliance-pack#download"},{"format":"docx","filename":"high-risk-deployer-compliance-pack-v24.docx","bytes":17723,"url":"https://aipolicytracker.org/templates/high-risk-deployer-compliance-pack#download"}],"url":"https://aipolicytracker.org/templates/high-risk-deployer-compliance-pack"},{"slug":"ai-use-case-intake-triage","title":"AI Use-Case Intake and Triage Form","type":"procedure","formats":["xlsx","docx"],"topics":["inventory","risk","governance"],"frameworks":["eu-ai-act","iso-42001","nist-ai-rmf"],"short":"Register and screen every proposed AI use before work starts: an intake register, a screen against every prohibited practice on record, and routing to standard, enhanced or transparency review.","covers":{"categories":["prohibited_practice","risk_management"]},"version":4,"dataset_version":"4559f86f527b","generated_at":"2026-10-16T05:30:05+00:00","citations":23,"downloads":3,"files":[{"format":"xlsx","filename":"ai-use-case-intake-triage-v4.xlsx","bytes":23491,"url":"https://aipolicytracker.org/templates/ai-use-case-intake-triage#download"},{"format":"docx","filename":"ai-use-case-intake-triage-v4.docx","bytes":12839,"url":"https://aipolicytracker.org/templates/ai-use-case-intake-triage#download"}],"url":"https://aipolicytracker.org/templates/ai-use-case-intake-triage"},{"slug":"gpai-model-provider-compliance-kit","title":"General-Purpose AI Model Provider Compliance Kit","type":"kit","formats":["xlsx","docx"],"topics":["transparency","risk","evidence"],"frameworks":["eu-ai-act"],"short":"For providers of general-purpose AI models: every recorded GPAI provider duty as a checklist, the information pack for downstream providers, a training-content summary worksheet and the systemic-risk sections.","covers":{"categories":["copyright_training_data","technical_documentation","safety_testing"]},"version":24,"dataset_version":"b92af3db4bf2","generated_at":"2026-10-28T05:30:01+00:00","citations":48,"downloads":0,"files":[{"format":"xlsx","filename":"gpai-model-provider-compliance-kit-v24.xlsx","bytes":23722,"url":"https://aipolicytracker.org/templates/gpai-model-provider-compliance-kit#download"},{"format":"docx","filename":"gpai-model-provider-compliance-kit-v24.docx","bytes":16038,"url":"https://aipolicytracker.org/templates/gpai-model-provider-compliance-kit#download"}],"url":"https://aipolicytracker.org/templates/gpai-model-provider-compliance-kit"},{"slug":"eu-ai-act-conformity-assessment-and-qms","title":"EU AI Act Conformity Assessment and QMS Workbook","type":"kit","formats":["xlsx","docx"],"topics":["governance","evidence"],"frameworks":["eu-ai-act","iso-42001"],"short":"For providers of high-risk AI systems: each recorded requirement mapped to the evidence that meets it, the thirteen quality management elements, a re-assessment trigger log and a draft declaration of conformity.","covers":{"categories":["conformity_assessment","quality_management"]},"version":24,"dataset_version":"b92af3db4bf2","generated_at":"2026-10-28T05:30:01+00:00","citations":48,"downloads":0,"files":[{"format":"xlsx","filename":"eu-ai-act-conformity-assessment-and-qms-v24.xlsx","bytes":23467,"url":"https://aipolicytracker.org/templates/eu-ai-act-conformity-assessment-and-qms#download"},{"format":"docx","filename":"eu-ai-act-conformity-assessment-and-qms-v24.docx","bytes":16321,"url":"https://aipolicytracker.org/templates/eu-ai-act-conformity-assessment-and-qms#download"}],"url":"https://aipolicytracker.org/templates/eu-ai-act-conformity-assessment-and-qms"},{"slug":"ai-dpia-supplement","title":"AI Supplement to a Data Protection Impact Assessment","type":"assessment","formats":["docx","xlsx"],"topics":["risk","governance"],"frameworks":["eu-ai-act"],"short":"Fifteen AI-specific questions to add to a DPIA (inferences, training on personal data, accuracy across groups, automated decisions, model attacks, suppliers), with the privacy and impact-assessment duties on record.","covers":{"categories":["privacy_data_protection","impact_assessment"]},"version":4,"dataset_version":"4559f86f527b","generated_at":"2026-10-16T05:30:06+00:00","citations":22,"downloads":0,"files":[{"format":"docx","filename":"ai-dpia-supplement-v4.docx","bytes":14363,"url":"https://aipolicytracker.org/templates/ai-dpia-supplement#download"},{"format":"xlsx","filename":"ai-dpia-supplement-v4.xlsx","bytes":16803,"url":"https://aipolicytracker.org/templates/ai-dpia-supplement#download"}],"url":"https://aipolicytracker.org/templates/ai-dpia-supplement"},{"slug":"adverse-decision-explanation-and-appeal-kit","title":"AI Decision Explanation and Appeal Kit","type":"kit","formats":["docx","xlsx"],"topics":["transparency","oversight"],"frameworks":["eu-ai-act","colorado-ai-act"],"short":"When AI makes or supports a decision about a person: an adverse decision notice, an explanation reply, a human review procedure and a request log that counts days to answer, with every duty on record that asks for them.","covers":{"categories":["transparency","human_oversight"]},"version":4,"dataset_version":"4559f86f527b","generated_at":"2026-10-16T05:30:06+00:00","citations":22,"downloads":0,"files":[{"format":"docx","filename":"adverse-decision-explanation-and-appeal-kit-v4.docx","bytes":13742,"url":"https://aipolicytracker.org/templates/adverse-decision-explanation-and-appeal-kit#download"},{"format":"xlsx","filename":"adverse-decision-explanation-and-appeal-kit-v4.xlsx","bytes":23537,"url":"https://aipolicytracker.org/templates/adverse-decision-explanation-and-appeal-kit#download"}],"url":"https://aipolicytracker.org/templates/adverse-decision-explanation-and-appeal-kit"},{"slug":"employment-ai-bias-audit-kit","title":"Employment AI Bias Audit Kit","type":"kit","formats":["xlsx","docx"],"topics":["workforce","risk","transparency"],"frameworks":["colorado-ai-act"],"short":"For hiring and HR tools: a selection-rate and impact-ratio calculator, an audit and notice tracker, a candidate notice template and the employment AI duties on record for New York City, Illinois and Colorado.","covers":{"policies":["us-new-york-city-local-law-144-automated-employment-decision-tools","us-illinois-hb-3773-ai-in-employment"]},"version":2,"dataset_version":"52bd836b1d6b","generated_at":"2026-10-08T05:30:03+00:00","citations":20,"downloads":0,"files":[{"format":"xlsx","filename":"employment-ai-bias-audit-kit-v2.xlsx","bytes":19736,"url":"https://aipolicytracker.org/templates/employment-ai-bias-audit-kit#download"},{"format":"docx","filename":"employment-ai-bias-audit-kit-v2.docx","bytes":13012,"url":"https://aipolicytracker.org/templates/employment-ai-bias-audit-kit#download"}],"url":"https://aipolicytracker.org/templates/employment-ai-bias-audit-kit"},{"slug":"ai-substantial-modification-change-log","title":"AI Change Log and Substantial Modification Test","type":"register","formats":["xlsx","docx"],"topics":["governance","evidence"],"frameworks":["eu-ai-act","iso-42001"],"short":"Every release of an AI system after it is in use, with a built-in test that flags a possible substantial modification, the decision and its approver, and the duties a change gate serves.","covers":{"categories":["conformity_assessment","post_market_monitoring"]},"version":2,"dataset_version":"52bd836b1d6b","generated_at":"2026-10-08T05:30:03+00:00","citations":10,"downloads":0,"files":[{"format":"xlsx","filename":"ai-substantial-modification-change-log-v2.xlsx","bytes":25572,"url":"https://aipolicytracker.org/templates/ai-substantial-modification-change-log#download"},{"format":"docx","filename":"ai-substantial-modification-change-log-v2.docx","bytes":12894,"url":"https://aipolicytracker.org/templates/ai-substantial-modification-change-log#download"}],"url":"https://aipolicytracker.org/templates/ai-substantial-modification-change-log"},{"slug":"frontier-ai-safety-framework","title":"Frontier AI Safety Framework and Transparency Report","type":"kit","formats":["docx","xlsx"],"topics":["risk","incidents","transparency"],"frameworks":["eu-ai-act"],"short":"For developers of the most capable models: an outline of a published safety framework and a model transparency report, a capability-threshold sheet, a safety incident log and the frontier-model duties on record.","covers":{"categories":["safety_testing","incident_handling"]},"version":3,"dataset_version":"1e8ea28a8a93","generated_at":"2026-10-09T05:30:04+00:00","citations":18,"downloads":0,"files":[{"format":"docx","filename":"frontier-ai-safety-framework-v3.docx","bytes":13252,"url":"https://aipolicytracker.org/templates/frontier-ai-safety-framework#download"},{"format":"xlsx","filename":"frontier-ai-safety-framework-v3.xlsx","bytes":19450,"url":"https://aipolicytracker.org/templates/frontier-ai-safety-framework#download"}],"url":"https://aipolicytracker.org/templates/frontier-ai-safety-framework"},{"slug":"ai-regulatory-horizon-scan","title":"AI Regulatory Horizon Scan","type":"register","formats":["xlsx","docx"],"topics":["governance","risk"],"frameworks":["eu-ai-act"],"short":"Twelve months of recorded AI policy changes with columns to rate relevance and assign actions, every upcoming deadline, and a quarterly briefing outline. Rebuilt whenever a change is recorded.","covers":{"categories":["governance_accountability"]},"version":9,"dataset_version":"b92af3db4bf2","generated_at":"2026-10-28T05:30:01+00:00","citations":74,"downloads":0,"files":[{"format":"xlsx","filename":"ai-regulatory-horizon-scan-v9.xlsx","bytes":26485,"url":"https://aipolicytracker.org/templates/ai-regulatory-horizon-scan#download"},{"format":"docx","filename":"ai-regulatory-horizon-scan-v9.docx","bytes":10689,"url":"https://aipolicytracker.org/templates/ai-regulatory-horizon-scan#download"}],"url":"https://aipolicytracker.org/templates/ai-regulatory-horizon-scan"},{"slug":"south-korea-ai-basic-act-checklist","title":"South Korea AI Basic Act Compliance Checklist","type":"checklist","formats":["xlsx","docx"],"topics":["governance","transparency","risk"],"frameworks":[],"short":"Every recorded duty of the Korean Framework Act as a checklist per product: advance notice and labelling of generative and high-impact AI, compute-threshold safety measures, high-impact duties and the domestic representative.","covers":{"policies":["south-korea-framework-act-on-the-development-of-artificial-intelligence-and-establishment-of-a-foundation-for"]},"version":2,"dataset_version":"1e8ea28a8a93","generated_at":"2026-10-09T05:30:04+00:00","citations":27,"downloads":0,"files":[{"format":"xlsx","filename":"south-korea-ai-basic-act-checklist-v2.xlsx","bytes":20555,"url":"https://aipolicytracker.org/templates/south-korea-ai-basic-act-checklist#download"},{"format":"docx","filename":"south-korea-ai-basic-act-checklist-v2.docx","bytes":13091,"url":"https://aipolicytracker.org/templates/south-korea-ai-basic-act-checklist#download"}],"url":"https://aipolicytracker.org/templates/south-korea-ai-basic-act-checklist"},{"slug":"texas-traiga-compliance-checklist","title":"Texas TRAIGA Compliance Checklist","type":"checklist","formats":["xlsx","docx"],"topics":["governance","transparency"],"frameworks":[],"short":"The Texas Responsible AI Governance Act duty by duty: the prohibitions on manipulation, unlawful discrimination and sexual-content misuse, and the AI disclosure duties for government agencies and health-care providers.","covers":{"policies":["us-texas-responsible-ai-governance-act-traiga"]},"version":1,"dataset_version":"c6967b988bb5","generated_at":"2026-10-05T15:51:26+00:00","citations":21,"downloads":0,"files":[{"format":"xlsx","filename":"texas-traiga-compliance-checklist-v1.xlsx","bytes":18407,"url":"https://aipolicytracker.org/templates/texas-traiga-compliance-checklist#download"},{"format":"docx","filename":"texas-traiga-compliance-checklist-v1.docx","bytes":12563,"url":"https://aipolicytracker.org/templates/texas-traiga-compliance-checklist#download"}],"url":"https://aipolicytracker.org/templates/texas-traiga-compliance-checklist"},{"slug":"us-state-ai-law-matrix","title":"US State AI Law Applicability Matrix","type":"register","formats":["xlsx","docx"],"topics":["governance","inventory"],"frameworks":["colorado-ai-act"],"short":"Every US federal and state AI instrument on record in one sheet, with status, legal force, application date, recorded duties and verification state, plus columns to decide which apply to you.","covers":{"policies":["us-texas-responsible-ai-governance-act-traiga","us-colorado-automated-decision-making-technology-act","us-california-sb-53"]},"version":3,"dataset_version":"4559f86f527b","generated_at":"2026-10-16T05:30:07+00:00","citations":63,"downloads":0,"files":[{"format":"xlsx","filename":"us-state-ai-law-matrix-v3.xlsx","bytes":26303,"url":"https://aipolicytracker.org/templates/us-state-ai-law-matrix#download"},{"format":"docx","filename":"us-state-ai-law-matrix-v3.docx","bytes":11118,"url":"https://aipolicytracker.org/templates/us-state-ai-law-matrix#download"}],"url":"https://aipolicytracker.org/templates/us-state-ai-law-matrix"},{"slug":"public-sector-ai-use-case-inventory","title":"Public-Sector AI Use-Case Inventory","type":"register","formats":["xlsx","docx"],"topics":["inventory","governance"],"frameworks":["eu-ai-act"],"short":"For government agencies: an AI use-case inventory in the shape public-sector rules ask for, flagging rights- and safety-affecting uses, with a procedure and every recorded duty that names public authorities.","covers":{"categories":["public_sector_use"]},"version":4,"dataset_version":"4559f86f527b","generated_at":"2026-10-16T05:30:07+00:00","citations":38,"downloads":6,"files":[{"format":"xlsx","filename":"public-sector-ai-use-case-inventory-v4.xlsx","bytes":28998,"url":"https://aipolicytracker.org/templates/public-sector-ai-use-case-inventory#download"},{"format":"docx","filename":"public-sector-ai-use-case-inventory-v4.docx","bytes":12299,"url":"https://aipolicytracker.org/templates/public-sector-ai-use-case-inventory#download"}],"url":"https://aipolicytracker.org/templates/public-sector-ai-use-case-inventory"},{"slug":"synthetic-content-labelling-plan","title":"Synthetic Content Labelling and Provenance Plan","type":"procedure","formats":["xlsx","docx"],"topics":["transparency"],"frameworks":["eu-ai-act"],"short":"One labelling design for AI-generated text, images, audio and video: per-feature visible labels and machine-readable marks, with every recorded duty to label, mark or disclose synthetic content.","covers":{"categories":["transparency"]},"version":3,"dataset_version":"1e8ea28a8a93","generated_at":"2026-10-09T05:30:04+00:00","citations":10,"downloads":0,"files":[{"format":"xlsx","filename":"synthetic-content-labelling-plan-v3.xlsx","bytes":16031,"url":"https://aipolicytracker.org/templates/synthetic-content-labelling-plan#download"},{"format":"docx","filename":"synthetic-content-labelling-plan-v3.docx","bytes":12139,"url":"https://aipolicytracker.org/templates/synthetic-content-labelling-plan#download"}],"url":"https://aipolicytracker.org/templates/synthetic-content-labelling-plan"}],"meta":{"total":41,"filters":{"type":null,"topic":null,"framework":null},"types":{"register":"Register","assessment":"Assessment","policy":"Policy","procedure":"Procedure","checklist":"Checklist","crosswalk":"Crosswalk","kit":"Kit"},"topics":{"inventory":"Inventory","risk":"Risk","governance":"Governance","transparency":"Transparency","incidents":"Incidents","vendors":"Vendors","oversight":"Human oversight","workforce":"Workforce","evidence":"Evidence"},"frameworks":{"eu-ai-act":"EU AI Act","iso-42001":"ISO/IEC 42001","nist-ai-rmf":"NIST AI RMF","colorado-ai-act":"Colorado ADMT law (SB 26-189)"},"license":"CC BY 4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","disclaimer":"This template is generated from the records on aipolicytracker.org. It is an informational resource, not legal advice, and completing it does not make an organisation compliant with any law or standard. Every row that cites a duty links to the record it came from; check the official source before relying on it."}}