AI governance: register, classification, obligations and incidents
A step-by-step assistant records each AI use: what it's for, who it affects and where it's used. Audexa shows its risk classification with the reasons and the articles behind it, and generates its obligations with the date they start to apply under Regulation (EU) 2024/1689, as amended by 2026/1744. Available from the Premium plan; the result is guidance and is always validated by a person in your organisation.
- More than 20 templates for well-known products such as ChatGPT, Claude, Microsoft 365 Copilot and Gemini
- Obligations with owner, due date, evidence and tasks; they only count as met with approved evidence
- Incident register with the legal notification deadline and email alerts
- Proposed answers for your ISO 42001 audit based on the use register
AI usage survey and public transparency page
Find out which AI tools your team uses with an anonymous survey that needs no account, and explain to clients, candidates and the public how you use AI with a transparency page in your own style.
- Surveys on AI usage, AI literacy and awareness of the AI policy
- Transparency page with your logo, your colours and one sheet per use
- Embed it on your website or download it as HTML, with a badge and QR code
- Questionnaires for each tool's provider, including your own questions
The Aude chat: ask, understand and act together
Aude becomes an assistant you can talk to. It answers with your organisation's real data and your permissions, shows its sources and knows which screen you're on. When it proposes a task, comment or review, nothing changes without your confirmation.
- Explains regulations with the Audexa catalogue and official sources
- Reads a contract and proposes dates, notice period, renewal and DORA data, with citations
- Explains a vRadar CVE and creates the task with the steps
- EU mode with models hosted in the European Union; your data is never used to train models
Audexa gets ahead: priorities and cross-module suggestions
Audexa reviews all your modules every day. "Today's priorities" opens the dashboard with what's urgent, ordered by severity, and suggestions propose in one module the action another one needs: a task and a risk for an exploited CVE, a DPA signature or linking new evidence to an AI obligation.
- When you accept a suggestion, Audexa creates what it proposes, always with your permissions
- A single Monday digest with what's urgent, what changed and what's due
Assets: devices, software, SaaS, suppliers and contracts
The IT inventory becomes Assets, with a section for each type and an owner on every asset, as ISO 27001 requires. Each SaaS and supplier gathers what an audit asks about third parties, and contracts send alerts 90, 60 and 30 days before the notice date and the end date.
- Periodic reviews based on each asset's criticality
- NinjaOne and SentinelOne no longer overwrite what your team has validated
- DORA register of information in Excel with the ITS 2024/2956 templates
- Import SaaS, suppliers, contracts and subcontractors from Excel
ISO 14001:2026 and 18 mapping sets
ISO 14001:2026, the environmental management framework, arrives from the Premium plan. Cross-framework mappings grow to 18 sets and 1,142 pairs, and when you create an audit you see how much of it your existing work already covers.
- New mappings for DORA with ISO 27001 and NIS2, NIS2 with ENS, and for ISO 42001, ISO 22301, ISO 27018 and TPRM
- ISO 27001 ↔ NIST CSF 2.0 grows from 31 to 130 pairs
- A control with a legal notification deadline never receives a Yes proposed from another framework
Your AI assistant, connected to Audexa
Claude Desktop, Claude Code, Cursor or VS Code can query the whole platform through MCP and, with the permissions you set on each key, create and update tasks, propose evidence links or record drafts. They never approve, validate or delete, and every change is logged.
- Ready-made workflows: remediation plan, management review or DORA third-party report
- Last use and activity of each key in Settings
Policies and important changes
13 new templates arrive in all five languages, including Environmental policy, Quality policy, Data protection impact assessment and Incident notification to authorities, and the AI use policy moves to version 3.0.
- "IT inventory" is now "Assets" and each asset's responsible person is now its "owner"
- Weekly emails are merged into a single Monday digest
- Aude's proposals on evidence are no longer applied automatically: you decide
- Security improvements to email verification and sign-in