AI Governance Studio

AI Governance Studio

AI Governance Studio takes AI use cases through the full lifecycle: intake, risk assessment, controls, evidence, four-eyes approval, operation with incidents and metrics, and reassessment. Built for governance, compliance, privacy and business owners who need to approve and monitor AI systems in a traceable way.

NOT A GOVERNMENT SERVICE: AI Governance Studio is an independent tool from a private developer. The app is not affiliated with the European Union or any government authority and does not represent a government entity.

Sources of the legal information (official texts):
• Regulation (EU) 2024/1689 on artificial intelligence (EU AI Act): https://eur-lex.europa.eu/eli/reg/2024/1689/oj
• Regulation (EU) 2016/679 (General Data Protection Regulation): https://eur-lex.europa.eu/eli/reg/2016/679/oj

Highlights:
• AI register: every use case with owners, status from intake to retirement, tags, timeline and the next sensible step; create from 6 templates or your own
• Risk assessment across 9 dimensions (likelihood × impact) plus uplifts for data classes, autonomy, decision impact and affected groups – risk index 0–100 with the formula shown, tiers minimal to critical, versioned assessments
• EU AI Act classification as guidance: 12 screening questions produce review hints, you choose the category; downgrading requires a justification
• Control catalog with 18 baseline controls such as bias testing, AI labeling and human oversight, assigned by risk tier, data class, autonomy and deployment
• Evidence with validity and review (accepted/rejected), files and photos AES-256 encrypted with SHA-256 checksum; expired evidence blocks approval
• Four-eyes approval: the case state is frozen by hash, voting rules per risk tier, voting by PIN on the device or via encrypted exchange package, conditions with due dates
• Model and vendor register with evaluation, DPA, security review, contract end and risk points; findings for deprecated models still in production
• Monitoring: incidents with response and containment deadlines, reporting-obligation check, metrics against thresholds with trend, periodic reassessment and local reminders
• Governance score per use case and a "Needs attention" dashboard
• Management report with frozen snapshot as PDF, CSV or JSON with manifest; audit log with hash chain and audit ZIP

Privacy: your data stays on your device. No account, no server, no tracking. Search is a local full-text search; the app itself uses no AI models.

Note: the app documents governance work and makes no legal or approval decisions. It does not replace legal advice.

Free: 1 workspace with up to 3 active use cases; reading, export, backup and answering exchange packages are always free. The monthly Premium subscription unlocks unlimited use cases, up to 5 workspaces and sending case handovers and approval requests. It renews automatically each month unless canceled at least 24 hours before the end of the period and can be canceled anytime in your store account settings.

Privacy policy: https://tonke.de/data-protection-en.html