Sarghaby Araghatta
Home / AI governance

Govern AI the way regulators now require, with evidence instead of slides.

Sargha turns the AI it found into a living register, classifies each system, maps the obligations and produces signed evidence an auditor can verify.

AI system registerEvery system, ownedClassify riskEU AI Act tierMap obligationsEU AI Act, NIST, ISO42001Controls andevidenceRisks, tests, ownersAttest and reportSigned and verifiableAI system registerEvery system, ownedClassify riskEU AI Act tierMap obligationsEU AI Act, NIST, ISO 42001Controls and evidenceRisks, tests, ownersAttest and reportSigned and verifiable
Register, classify, map, evidence, attest.

Know every AI system

Every AI app, command-line tool, SDK, tool server and browser extension in use, with an owner, a lifecycle and an EU AI Act tier. The same register covers agent frameworks, RAG apps and machine identities.

Classify with a person accountable

Sargha suggests a tier (prohibited, high-risk, limited or minimal) and an accountable person confirms it. It is not a legal determination. Each system shows the obligations its tier triggers and the evidence Sargha holds for each.

Map once, report to each standard

EU AI Act (Articles 4, 10, 14 and 15), NIST AI RMF and ISO/IEC 42001 controls, tied to findings and their current state. Roadmap Automatic mapping of more articles is planned.

A risk register that maintains itself

Article 9 asks for a living risk-management system. Sargha keeps one: every AI risk scored, owned and treated, drafted from the same findings. See Risk assessment.

Signed evidence

Signed compliance evidence reports per framework, built from real evidence and verifiable on a public verify page. Roadmap A product-generated Safety and Security Model Report is planned; today it is an engagement deliverable.

No spreadsheet per standard

One register and one evidence base answer the EU AI Act, NIST AI RMF, ISO/IEC 42001 and the security frameworks your customers audit against.

The forcing function

The obligations phase in, and they escalate.

Feb 2025Prohibited practices(Art. 5)Aug 2025General-purpose modeldutiesAug 2026Transparency (Art. 50)2 Dec 2027High-risk systems(Annex III)2 Aug 2028AI in regulatedproducts (Annex I)Feb 2025Prohibited practices (Art. 5)Aug 2025General-purpose model dutiesAug 2026Transparency (Art. 50)2 Dec 2027High-risk systems (Annex III)2 Aug 2028AI in regulated products (Annex I)
The EU AI Act phases in on a fixed calendar, and penalties escalate with the obligation.

High-risk rules for Annex III systems moved from 2 Aug 2026 to 2 Dec 2027, and AI in regulated products moved from 2 Aug 2027 to 2 Aug 2028, under the Digital Omnibus on AI (Regulation (EU) 2026/1744). Penalties run up to €35M or 7% of global turnover for prohibited uses, and up to €15M or 3% for most other obligations. As of 6 October 2026. Mapping and orientation, not legal advice: confirm Official Journal publication and the current text before relying on any date.

What you need
  • The AI inventory from your sensors and connectors.
  • An accountable person to confirm each risk tier.
Get started

See the AI on your fleet in about a week.

Run the sensor across your estate and receive an AI risk report and an AI Bill of Materials. The assessment is free and carries no commitment.

Request a free assessment → Book a 30-minute call