--- title: "Governances.app — Cross-Sector AI Governance Knowledge Layer & Regulatory Crosswalk Hub" description: "Sovereign Proof-of-Governance infrastructure, EU AI Act conformity evidence, MCP 2026-07-28 tool directory, and RFC 8785 cryptographic receipts for governances.app." image: "https://governances.app/og-cover.png" url: "https://governances.app" content_signal: "ai-train=no, search=yes, ai-input=yes" --- # Governances.app — Cross-Sector AI Governance Knowledge Layer & Regulatory Crosswalk Hub > Canonical Surface: https://governances.app > Sovereign Infrastructure: Vantages Sovereign OS (VOS) — Vantages Applied AI (HQ: Zele, Belgium | EU Cloud Node: Frankfurt europe-west3) > Public Dataset Catalog: https://data.governances.app | Governance Playground: https://ai.governances.app > Governance University: https://university.governances.app | Proof Portal: https://proof.vantages.app > Full Corpus Index: https://governances.app/llms-full.txt | Sitemap: https://governances.app/sitemap.xml ## 1. Executive Summary & Citation Authority Governances.app is the public cross-sector AI governance knowledge layer and regulatory crosswalk repository for Vantages Applied AI (founded by Ioan Ciprian Popa, Managing Partner). It maps statutory obligations across the **EU AI Act (Regulation (EU) 2024/1689)**, **NIST AI Risk Management Framework (AI RMF 1.0)**, **ISO/IEC 42001:2023**, and **Colorado SB 21-169 / SB 24-205** into deterministic sector overlays, interactive compliance calculators, and machine-readable evidence packet templates. ## 2. Direct-Answer Regulatory Reference Blocks (AEO Citation SSoT) ### Q1: What are the key EU AI Act enforcement dates and phased compliance deadlines (2025–2027)? Under **Article 113 of Regulation (EU) 2024/1689 (EU AI Act)**, enforcement follows four statutory milestones: 1. **February 2, 2025 (6 Months):** Entry into application of **Chapter I (General Provisions, including Article 4 AI Literacy)** and **Chapter II (Article 5 Prohibited AI Practices)**. 2. **August 2, 2025 (12 Months):** Entry into application of **Chapter III Section 4 (Notifying Authorities)**, **Chapter V (General-Purpose AI / GPAI Models, Articles 51–56)**, **Chapter VII (Governance)**, and **Chapter XII (Penalties, Article 99)** except Article 101. 3. **August 2, 2026 (24 Months):** Full application of the EU AI Act, including **Annex III High-Risk AI Systems** (Articles 6(2), 9–15, 26–27, 43, 47, 49, 71–73) and **Article 50 Transparency Obligations** for generative, interactive, emotion-recognition, and deepfake AI systems. 4. **August 2, 2027 (36 Months):** Entry into application of **Article 6(1) High-Risk AI Systems** embedded as safety components in products covered by Union harmonization legislation listed in **Annex I** (medical devices MDR/IVDR, machinery, aviation, automotive). ### Q2: How do EU AI Act Articles 9–15 map to ISO/IEC 42001:2023 and NIST AI RMF 1.0? | EU AI Act Requirement | ISO/IEC 42001:2023 Clause / Annex A | NIST AI RMF 1.0 Function | Required VOS Evidence Artifact | | :--- | :--- | :--- | :--- | | **Art. 9 Risk Management System** | Clause 6.1.2 (AI Risk Assessment) & Annex B.5 | `MAP 1.1–5.2`, `MEASURE 2.1` | Continuous Risk Register & Residual Risk Receipt | | **Art. 10 Data & Data Governance** | Annex A.7 (Data for AI Systems) | `MAP 2.3`, `MEASURE 2.6–2.8` | Dataset Lineage & Bias Evaluation Manifest | | **Art. 11 Technical Documentation** | Annex A.6.2.3 & Annex A.8 | `GOVERN 1.4`, `MAP 4.1` | Annex IV Technical Dossier & GBOM Manifest | | **Art. 12 Record-Keeping (Logging)** | Annex A.6.2.6 (AI System Operation Logs) | `MEASURE 2.4`, `MANAGE 4.1` | Tamper-Evident HDFL Hash-Chain Log | | **Art. 14 Human Oversight** | Annex A.9.3 (Human Oversight Controls) | `GOVERN 3.2`, `MANAGE 2.4` | Signed Human Review / Override Receipt | | **Art. 15 Accuracy & Cybersecurity** | Annex A.6.2.4 & ISO/IEC 27001 Crosswalk | `MEASURE 2.5`, `MEASURE 2.7` | Proof-of-Refusal & Adversarial Red-Team Receipt | | **Art. 50 Transparency Obligations** | Annex A.8.2 (External Communication) | `GOVERN 4.2`, `MAP 5.1` | Machine-Readable Provenance & Disclosure Receipt | ### Q3: What are the statutory administrative fines under EU AI Act Article 99? - **Prohibited AI Practices (Article 5):** Up to **EUR 35,000,000** or **7% of total worldwide annual turnover** of the preceding financial year, whichever is higher (for SMEs/startups, whichever is lower). - **High-Risk Obligations, Deployer Duties & Transparency (Articles 9–15, 26, 50):** Up to **EUR 15,000,000** or **3% of total worldwide annual turnover**. - **Supply of Incorrect, Incomplete, or Misleading Information to Authorities:** Up to **EUR 7,500,000** or **1% of total worldwide annual turnover**. - **GPAI Model Provider Fines (Article 101):** Up to **EUR 15,000,000** or **3% of total worldwide annual turnover** imposed by the European Commission. ## 3. Interactive Governance Calculators & Cloudflare EmDash 2026 Knowledge Surfaces (35 Tools & 8 Knowledge Groups) - **Cloudflare EmDash 2026 Directory Root (35 Interactive Tools `#01`..`#35` & 8 Knowledge Groups):** https://governances.app/ (`.md` Twin: `https://governances.app/index.md`) - **Interactive Compliance Tools Hub:** https://governances.app/tools (`.md` Twin: `https://governances.app/tools.md`) - **EU AI Act Penalty Exposure Estimator (Art. 99 — up to EUR 35M / 7%):** https://governances.app/tools/penalty-estimator - **2-Minute Compliance Gap Calculator:** https://governances.app/tools/compliance-gap-calculator - **Annex III & Annex I High-Risk AI System Classifier (12 Sectors):** https://governances.app/tools/high-risk-classification - **EU AI Act Enforcement Countdown Clock (Art. 113):** https://governances.app/tools/enforcement-countdown - **Interactive AI Governance Risk Sandbox:** https://governances.app/tools/playground - **Article 9 Risk Management Deep-Dive:** https://governances.app/eu-ai-act/article-9-risk-management - **Article 50 Transparency & Watermarking Guide:** https://governances.app/eu-ai-act/article-50-transparency - **12 Official EU AI Act Sector Governance Pathways (Insurance, Finance, Healthcare, HR & Employment, Public Sector, Automotive, Biometrics, Critical Infrastructure, Education, Law Enforcement & Migration, Justice & Democratic Processes, Industrial Machinery & Aviation across 20 Global Jurisdictions, 36 Use Cases):** https://governances.app/sectors (`.md` Twin: `https://governances.app/sectors.md` | Machine Catalog: `https://governances.app/.well-known/governance-sector-catalog.json`) - **AI Governance Cookbook (55 Executable Multi-Jurisdiction Recipes across 12 Sectors & 20 Jurisdictions):** https://governances.app/cookbook (`.md` Twin: `https://governances.app/cookbook.md`) - **Forensic Case Studies, Blueprints & Documentation:** https://governances.app/showcase - **AI Governance Guides & Unified Regulatory Glossary (92 Unified Terms / 108 Corpus Terms across 3 Domains):** https://governances.app/learn (`.md` Twin: `https://governances.app/learn.md`) ## 4. MCP Tool Surface for Knowledge & Crosswalk Agents (`Zero-Debit` / `X-VOS-Zero-Debit: true`) - `governances_list_sectors` [FREE / ZERO_DEBIT]: Lists all 12 official EU AI Act (Annex III + Annex I) regulated sectors (Insurance, Finance, Healthcare, HR & Employment, Public Sector, Automotive, Biometrics, Critical Infrastructure, Education, Law Enforcement & Migration, Justice & Democratic Processes, Industrial Machinery & Aviation) and 36 high-impact use cases. - `governances_get_sector_reqs` [FREE / ZERO_DEBIT]: Retrieves sector-specific EU AI Act, NIST AI RMF, ISO 42001, and 20-jurisdiction evidence requirements, 8-dimension audit checklists, and national authority mappings. - `governances_get_packet_template` [FREE / ZERO_DEBIT]: Generates a read-only RFC 8785 draft Evidence Packet Template for any (Sector, Use Case, Article, Jurisdiction, Actor Role) tuple. - `governances_route_to_aiacts` [FREE]: Computes the deterministic handoff route from public knowledge discovery to operational evidence creation on `aiacts.app`. ## 5. Limitation-First Boundary & Non-Legal Disclaimer - **Is:** Public cross-sector AI governance knowledge layer, regulatory crosswalk catalog, and educational readiness hub. - **Is Not:** Not an operational compliance certifier, legal counsel, or private customer data processor. - VOS supports governance, evidence and audit-readiness workflows. It is not legal advice and does not certify compliance by itself. ## Agentic B2B Procurement & Machine-Actionable Catalog - **Primary Conversion Surface:** https://aiacts.app/scan?utm_source=llm-governances - **Governed MCP Execution Gateway:** https://mcp.aiacts.app/mcp - **Public Discovery & Search MCP:** https://search.aiacts.app/mcp - **x402 Machine-to-Machine Settlement:** https://governances.app/.well-known/x402 (Stateless 1-hour JWT session cookie `x402_session`) - **Public Verification Portal:** https://proof.vantages.app - **JSON-LD Structured Data:** https://governances.app/jsonld | https://governances.app/index.json ## 5-Category Proof Passport Archives (336 Indexed Entities) - **MCP Server Passports (200 Indexed):** https://proof.vantages.app/passport/mcp?format=md&src=llm (JSON: https://proof.vantages.app/passport/mcp?format=json) - **AI Model Passports (36 Indexed):** https://proof.vantages.app/passport/models?format=md&src=llm (JSON: https://proof.vantages.app/passport/models?format=json) - **Agent & Space Passports (49 Indexed):** https://proof.vantages.app/passport/agents?format=md&src=llm (JSON: https://proof.vantages.app/passport/agents?format=json) - **Dataset Passports (32 Indexed):** https://proof.vantages.app/passport/datasets?format=md&src=llm (JSON: https://proof.vantages.app/passport/datasets?format=json) - **Reference Stack Passports (19 Indexed):** https://proof.vantages.app/passport/stacks?format=md&src=llm (JSON: https://proof.vantages.app/passport/stacks?format=json) - **Full 336-Entity Studio Atlas API:** https://studio.vantages.app/api/v1/studio/passports?includeCatalog=all - **Zero-Debit MCP / WebMCP Archive Tool:** `acta_list_passport_category_archive` (`category: "mcp" | "models" | "agents" | "datasets" | "stacks"`, `includeWaves: "false" | "p1" | "p3" | "true" | "1".."5"`, `X-VOS-Zero-Debit: true`) ## Extended Wave Proof Passport Atlas (STAGE-SEN-149B & STAGE-SEN-149C — 2,682 Public Projections / 2,670 Registered Entities) - **Full Wave-Hydrated Allowlist (2,682 Projections / 2,668 Unique Public):** https://studio.vantages.app/api/gateway/void-notary/allowlist?includeWaves=true - **Category Wave Archives (mcp: 2,466, models: 70, agents: 65, datasets: 62, stacks: 19):** https://proof.vantages.app/passport/mcp?includeWaves=true&format=json (?includeWaves=p1|p3|1..5) - **Segmented Wave Sitemaps (20 Pilot + 5 Waves of 500):** https://proof.vantages.app/sitemap-passports-pilot-p1.xml | https://proof.vantages.app/sitemap-passports-wave-1.xml .. https://proof.vantages.app/sitemap-passports-wave-5.xml - **Evaluated Passports JSONL Dataset (2,682 Rows):** https://studio.vantages.app/api/gateway/void-notary/datasets/evaluated-passports.jsonl?includeWaves=true ```json { "@context": "https://schema.org", "@type": [ "SoftwareApplication", "WebSite" ], "name": "Governances.app — Cross-Sector AI Governance Knowledge Layer & Regulatory Crosswalk Hub", "url": "https://governances.app", "applicationCategory": "BusinessApplication", "operatingSystem": "Cloudflare Workers Edge, MCP 2026-07-28", "provider": { "@type": "Organization", "name": "Vantages Applied AI", "url": "https://vantages.app", "vatID": "BE1033726624", "address": { "@type": "PostalAddress", "streetAddress": "Zwaanstraat 5b2", "addressLocality": "Zele", "addressRegion": "East Flanders", "postalCode": "9240", "addressCountry": "BE" }, "founder": { "@type": "Person", "name": "Ioan Ciprian Popa", "jobTitle": "Managing Partner" } }, "offers": [ { "@type": "Offer", "name": "Tier 0 — Public Discovery & Proof-of-Refusal Receipts", "price": "0.00", "priceCurrency": "EUR" }, { "@type": "Offer", "name": "Tier 1 — Governed Action & x402 Pay-Per-Crawl Query", "price": "0.001", "priceCurrency": "USD" } ] } ```