What each asks, who it applies to, its dates and overlaps, on its own page. Every figure is computed from the shipped catalogues and templates.
Per-system obligations derived by the rules engine from your role, risk tier and the system's behaviour, across six gated phases.
Not: A certificate. One harmonised standard, EN 18286, is now cited: a presumption of conformity, for providers only, for the Article 17 quality management system and the first sentence of Article 11(1). No other is cited yet.
Binding law on every system that processes personal data, never a switch. Organisation duties (RoPA, retention, breach and rights procedures) are a programme you switch on, free on every plan.
Not: A gate. GDPR duties never hold an EU AI Act stage open or count toward its figures: a system shows two figures, EU AI Act journey and GDPR duties.
A programme you switch on: gated phases that build the AI management system (policy, roles, risk method, impact assessment, competence, audit, review) and the Statement of Applicability.
Not: A legal shield, or our certificate: an accredited body certifies, and ISO/IEC 17021-1 §5.2.5 keeps the consultant and the certifier apart.
A programme you switch on, run as one management system with ISO/IEC 42001 where clauses match; the 93 Annex A controls as guided themes, with a generated SoA.
Not: A second set of forms for clauses already answered. A step both standards ask for is one record, credited in both.
A programme you switch on: Govern, Map, Measure, Manage as twelve steps that reuse EU AI Act records, ending in a generated profile document.
Not: A certificate. None exists for the NIST AI RMF, and the product never implies one.
The law's dates, from one registry. Nothing on any screen turns red before its statutory date.
The three standards are voluntary and carry no date of their own.
A standard you switch on becomes a programme: gate-locked phases, one record per step, a read-only Clauses tab for your auditor. The EU AI Act is never a programme: it is law.
14 of the 69 records behind the programme steps and GDPR organisation duties count toward two or more frameworks. Only full credit, verified clause by clause, counts. It shows in three places:
The other frameworks you run where this piece of work is fully credited, with the clause it closes. Only frameworks you switched on; only full credit.
A step whose every clause is met by work finished elsewhere is Done, with a note saying so. Never a separate status; nothing done twice.
How many of a programme's steps were credited by work already on file: the head start a second standard gives you.
Each toggle adds a programme; the figures come from the templates the product ships. The EU AI Act is always on. The GDPR toggle covers its organisation programme; the duties on each system stay on.