How EUQA works
EUQA turns AI governance into five controls you can complete in days, then keeps them current. The output is a public trust profile a client, insurer or procurement team can verify.
The five controls
- Governance — Maintain the policy and operating rules for AI use.
- Ownership — Assign a named person accountable for AI oversight.
- AI literacy — Record how staff are supported to use AI responsibly — the practical fluency behind the obligation.
- Inventory — Know which AI tools and digital workers your business uses.
- Verification — Publish evidence that clients, insurers and procurement teams can check.
Document, capture, corroborate
Each control collects evidence rather than a tick box. EUQA scores the confidence of that evidence, shows what is missing, and flags what needs re-checking as your AI use changes.
Then monitor and publish
Regulatory updates relevant to where you operate are turned into owner-assigned actions, and your trust profile updates as evidence is refreshed.
Timing
- Already applicable: AI literacy obligations have applied since 2 February 2025. Firms using AI should be able to show what measures they have taken to help relevant staff use it responsibly.
- Applicable now: From 2 August 2026, specific AI interactions and certain AI-generated or manipulated content must be disclosed or marked. Whether that applies depends on how the system is used. National authorities also begin exercising relevant enforcement powers from this date.
- Preparation window: The main requirements for standalone high-risk systems are scheduled to apply from 2 December 2027. Systems used to analyse, filter or evaluate people in an employment context fall within the high-risk employment category, subject to the relevant legal conditions.