01
AI Inventory
Surface every AI system in use across the firm, including the shadow AI nobody told you about, in one register you can actually maintain.
Answers “what are we using?”
Early access · launching 2026
Your AI governance, in one place.
The cosantio platform turns AI Act readiness into a workflow a small or medium firm can actually run. Every system you use, classified; every obligation, tracked; every artefact a regulator might ask for, generated and kept current. We are onboarding early-access firms now.
What it does
From scattered AI use to a defensible file.
Most small firms cannot answer a simple question: what AI are we using, and what does the law require of each system? The platform answers it, then keeps the answer current as systems and rules change. These are the core modules.
02
Risk Classification
Classify each system against Annex III: prohibited, high-risk, limited, or minimal, with the provider-versus-deployer call made explicit.
Maps to Annex III
03
FRIA Studio
Work through a Fundamental Rights Impact Assessment for each high-risk system, with cited evidence and documented mitigations.
Supports Article 27
04
Evidence Locker & Literacy Log
A versioned document vault for your governance evidence, plus AI literacy tracking across staff, the obligation that has been fully in force since February 2025.
Evidences Article 4
05
Policies & Vendor Register
AI governance policies mapped to your sector regulator, plus a due-diligence register for the third-party AI tools you rely on.
Built for your sector
06
Board Pack & Audit Trail
Regulator-grade exports your board can sign and an auditor can read, generated from the live state of your governance, not a stale document.
Ready when asked
Why it's different
Not an enterprise suite. Not a static template.
The platforms regulators reference are built for FTSE 100 firms and AI ethics committees. cosantio is built for the firm that has none of that, and a deadline anyway.
[ ]
SME-scale, not enterprise
Priced and scoped for a company of 10-250 people, not a huge enterprise. No six-figure consultancy bill or unnecessary red tape.
{ }
Evidence, not frameworks
The platform produces the artefacts an auditor actually asks for: registers, FRIAs, logs, board packs. Not a responsible-AI manifesto.
</>
A person, not just software
Every cosantio engagement has a named human attached. The platform never stands alone in front of you when the audit lands.
Early access
Be among the first firms on the platform.
We are onboarding early-access firms through 2026. Request access to see the platform and shape what we build, or start with the free Scorecard today.