Know where every AI system stands, before an auditor asks.
Heimdall.SI™. The EU AI Act auditing suite. It keeps your technical documentation current as AI systems change, sorts each model into the Act's risk tiers and flags the gaps, and keeps a tamper-evident record of inputs, outputs and human overrides.
The name
The one who never sleeps.
Heimdall guards Bifröst. He needs less sleep than a bird, sees a hundred leagues by day or by night, and can hear grass growing on the ground and wool growing on a sheep. If something is coming over the bridge he knows first, and he has the horn to tell everyone.
That is what an audit ought to be like, and rarely is. Heimdall.SI watches AI systems continuously, keeps the paperwork current while the models change, and records what happened. When the regulator asks, nobody is reconstructing it from memory.
Heimdallr/Old Norse, the watchman of the gods
What it does
The paperwork follows the system.
Most teams write the documentation once and let it drift. Heimdall.SI watches the system, so the file, the risk tier and the records stay in step with what is actually running.
Document
Annex IV builder
Builds the technical documentation the Act requires and rebuilds it whenever your AI system changes, so the file matches what is actually running. Someone on your side still reviews and approves it.
Classify
Continuous risk triage
Sorts each model and each use into the Act's tiers (unacceptable, high, limited and minimal) and flags gaps against the obligations that follow, before they turn into findings or fines. Models from other vendors are covered too.
Prove
Traceability vault
Keeps a tamper-evident record of model inputs, outputs and human overrides, so your legal team can reconstruct a decision months later when an auditor asks.
Any stack
It does not matter who built the system.
Heimdall.SI audits AI systems built by you, by a vendor or by someone else entirely. It reads the evidence that exists and shows what is missing.
It prepares documentation and flags gaps. It is not legal advice, and it does not replace a conformity assessment where the Act requires one. Run it hosted in the EU or inside your own environment.
What it covers
Any model, any vendor
Models you built, third-party APIs and open-weight models, in software and in physical systems.
What it reads
The evidence you have
Repositories, model cards, data sheets, test results and logs. It shows what is missing, so you know what to produce next.
Who uses it
Your whole team
Compliance, legal, engineering and product work from the same record, instead of passing documents around.
Use cases
Wherever an AI system touches the EU.
The Act applies to systems used in the EU, wherever the company is based. We start from the system that carries the most risk or the nearest deadline.
Providers of high-risk systems
Keep the technical file, risk management and logging in one place, ready for conformity assessment.
Companies using third-party models
Know which vendor models you rely on, what tier each use falls into, and what the vendor has not told you.
Machinery and medical devices
Track AI that acts as a safety component and keep its documentation aligned with your product file.
Banks and insurers
Document credit scoring, pricing and fraud models, and keep a record of every human override.
HR and recruitment
Screening and ranking tools are high-risk under the Act. See where they sit and what you owe.
Software and AI vendors
Give enterprise buyers the documentation they ask for in procurement, without a scramble each time.
Ways to start
Three ways to work with Heimdall.SI.
Every company has a different set of systems, so there is no price list. Tell us what you run and we will propose a starting point.
Assessment
One system, one clear picture.
We take one AI system, classify it, and produce a gap report and a first documentation set from the evidence you already have.
- Scoping session with your compliance and engineering teams
- Risk tier classification for one system
- Gap report against the obligations that apply
- A first Annex IV draft for your review
Continuous
Documentation that keeps up.
Heimdall.SI is connected to your systems and keeps documentation, classification and records current as the systems change.
- Hosted in the EU, or run in your own environment
- Documentation rebuilt on every relevant change
- Traceability vault for inputs, outputs and overrides
- Training for the people who will use it
Portfolio
Every system, every vendor.
For companies running many AI systems or relying on many vendors. We bring the full estate in and give leadership one view of where it stands.
- Inventory of AI systems across the company
- Vendor model tracking and gap follow-up
- Dedicated engineering time
- Roadmap agreed with your leadership
Tell us what you run.
Heimdall.SI is offered by enquiry only. Tell us which AI systems you run or buy and what is driving the work, and we will reply within two business days, usually with a few scoping questions.
Want AI systems built with these controls from the start? That is our consulting work, described under Governance.