How EUQA works
EUQA turns AI governance into five controls you can complete in days, then keeps them current. The output is a public trust profile a client, insurer or procurement team can verify.
The five controls
- AI Policy — Set clear rules for how people can use AI at work.
- Responsible Owner — Name the person responsible for keeping AI use under control.
- AI Literacy — Help people understand how to use AI safely, confidently and well.
- AI Inventory — Know which AI tools, agents and automations your business uses.
- AI Suppliers — Check the suppliers and dependencies behind the AI you rely on.
Document, capture, corroborate
Each control collects evidence rather than a tick box. EUQA scores the confidence of that evidence, shows what is missing, and flags what needs re-checking as your AI use changes.
Then monitor and publish
Regulatory updates relevant to where you operate are turned into owner-assigned actions, and your trust profile updates as evidence is refreshed.
Timing
- Already applicable: AI literacy obligations have applied since 2 February 2025. Firms using AI should be able to show what measures they have taken to help relevant staff use it responsibly.
- Applicable now: From 2 August 2026, specific AI interactions and certain AI-generated or manipulated content must be disclosed or marked. Whether that applies depends on how the system is used. National authorities also begin exercising relevant enforcement powers from this date.
- Preparation window: The main requirements for standalone high-risk systems are scheduled to apply from 2 December 2027. Systems used to analyse, filter or evaluate people in an employment context fall within the high-risk employment category, subject to the relevant legal conditions.