AI governance for universities and education systems.
Keep one record of the AI tools your institution uses: who owns each one, which data may be used with it, which policies, training, and oversight apply, and where the evidence is. Admission, learning assessment, and exam-monitoring uses can be high-risk under Annex III, depending on their intended purpose; Complaix records the classification, rationale, controls, evidence, approval state, and change history for each.
We are not asking your institution to replace the AI governance program it is already building -- the approved-tool lists, data-classification rules, AI grading guidance, and AI literacy resources. Complaix would operationalize and connect those processes as one system of record, starting with a co-development design partnership, not a purchase.
Live in Complaix today
One operating loop, from registration to report.
This is the real governance loop running in the product today -- not a mockup. Every step below is a working Complaix feature.
Register the AI system
Owner, purpose, provider/model context, and lifecycle status.
Live todayClassify the risk
Run the classifier and record the rationale behind the result.
Live todayAssess fundamental rights impact
Processes, affected groups, risks, and mitigations for applicable high-risk uses (Art. 27).
Live todayMap controls & evidence
Attach evidence to each control and review it as accepted, stale, or missing.
Live todayRoute approval
Request reviewer sign-off; approval is blocked while health isn't defensible.
Live todayAssign human oversight
Track who can override, stop, or intervene, and log oversight events (Art. 14).
Live todayReport incidents
Severity tiers, reporting deadlines, and corrective actions (Art. 73).
Live todayProduce the governance report
Workflow timeline, changes, and evidence in one exportable record.
Live todayDesign-partner roadmap -- not built yet
Enterprise SSO and directory sync, an approved-tool catalogue with permitted data classes, and CSV/API import of your existing tool inventory. Role-appropriate AI literacy modules, policy acknowledgements, and employee task views already exist and are part of the loop above. We would co-develop the rest with an education design partner, not replace what's already built.
Two views of the same record.
Compliance and IT get the full governance record. Faculty and staff get a simple personal task list for the literacy and policy items assigned to them -- scoped to only the roles and systems that need it.
Your compliance & IT team
- AI system inventory with owners and lifecycle status
- Risk classification with recorded rationale
- Controls mapped to each governed workflow
- Evidence linked, reviewed, and tracked for staleness
- Approval requests, decisions, and blockers
- Human oversight assignment and event log (Art. 14)
- Serious incident reporting with deadlines (Art. 73)
- Fundamental Rights Impact Assessment for applicable uses (Art. 27)
- Workflow timeline and governance report export
Your faculty & staff
- See the literacy modules and policy acknowledgements assigned to them
- Complete role-appropriate AI literacy modules
- Acknowledge approved-use and data-handling policies
- Declare which AI tools they useroadmap
- Sign in through institutional SSOroadmap
- Get recurring reminders before a review or acknowledgement is dueroadmap