TrigGuard
TRIGGUARD
Request access

Governance > Regulatory mapping

Regulatory Mapping Execution Control Meets Compliance

TrigGuard enforces authorization before irreversible execution. This page maps our controls and evidence to major regulations and frameworks across the UK and EU.

Deterministic control

Permit / deny / silence decisions before execution.

Verifiable evidence

Signed receipts with offline verifiability and audit trails.

Privacy by design

Data minimization, encryption, and no cross-site tracking.

Framework aligned

Mapped to UK, EU, and global regulatory requirements.

Supported Frameworks

We actively map our controls and evidence to the following regulations and standards.

Framework Focus Mapping
EU AI ACT High-risk AI systems obligations, risk management, governance, transparency, and logging. View mapping ->
UK GDPR Lawful processing, data minimization, security, and accountability for AI operations. View mapping ->
DORA Operational resilience, ICT risk controls, incident reporting, and third-party risk governance. View mapping ->
NIS2 Cybersecurity risk management, supply chain safeguards, and incident notification discipline. View mapping ->
ISO/IEC 27001 Information security management system controls and evidence management. View mapping ->
SOC 2 Security, availability, processing integrity, confidentiality, and privacy criteria. View mapping ->
SR 11-7 Model risk management expectations for financial institutions. View mapping ->
PRA SS1/23 Operational resilience policy statement for banks and insurers. View mapping ->

Control Mapping Overview

TrigGuard controls map to regulatory requirements across five key domains.

DomainWhat TrigGuard ProvidesKey OutcomesFrameworks Impacted
Governance & OversightPolicy lifecycle, role-based access, change control.Accountability and documented governance.AI Act, GDPR, ISO 27001, SOC 2, DORA, NIS2
Risk ManagementPre-execution authorization, risk classification, fail-closed defaults.Risk reduction and deterministic control.AI Act, DORA, NIS2, SR 11-7, ISO 27001
Execution ControlsPermit / deny / silence decisions before irreversible actions.Prevent unauthorized or risky execution.AI Act, DORA, NIS2, SOC 2, SR 11-7
Evidence & AuditSigned receipts, immutable logs, offline verifiability.Audit-ready evidence and non-repudiation.AI Act, GDPR, DORA, NIS2, SOC 2, ISO 27001
Privacy & SecurityData minimization, encryption, key management.Confidentiality, integrity, privacy compliance.GDPR, ISO 27001, SOC 2, DORA, NIS2
View full control catalogue ->

Regulation Deep Dives

Detailed mappings and guidance for each regulation.

This mapping is for informational purposes and reflects current regulatory guidance as of May 2026. Regulations evolve; contact us for latest updates and custom assessments.