The Law
High-risk obligations land in 2026.
EU AI Act high-risk provisions phase in through 2026–2027. Art. 4 AI literacy has been enforceable since February 2025. No statutory readiness benchmark exists.
REG. 2024/1689 · ART. 4 & ART. 99
EU AI Governance ReadinesIndex.
The first cross-industry benchmark for AI governance maturity in Europe. Self-assess across eight dimensions, cross-mapped at article level to the EU AI Act, GDPR, DORA and NIS2 — and contribute to building the foundational dataset of a new annual index.
90s
Governance Snapshot
8
Dimensions Scored
Annual
Benchmark Cadence
4
Regulations Mapped
Why an Index, Why Now
Four converging pressures. No common benchmark.
European firms face the most ambitious technology regulation in a generation. No widely-adopted self-assessment framework exists. AIGRI is an indicative starting point — designed with mid-market in mind, open to firms of any size.
The Stack
Four regulations interlock.
EU AI Act, GDPR, DORA, NIS2. Each carries its own obligations and ceilings. No public measure captures cross-mapped maturity across all four simultaneously.
CROSS-MAPPED · ARTICLE LEVEL
The Market
The unmeasured middle.
Mid-market firms (200–2,000 FTE) sit below big-four GRC budgets and above template territory. They're often underserved by existing toolsets — but AIGRI is open to all.
FOCUS: 200–2,000 FTE · OPEN TO ALL
The Window
Twelve months to prove "appropriate".
Regulators expect "appropriate governance" before phase-end. Without a benchmark, firms guess. With one, they evidence — and so does the supervisor reviewing them.
PHASING: 2 AUGUST 2026 & 2027
How the Assessment Works
Two paths. One scoring engine.
Whether you have 90 seconds or 25 minutes, both paths produce the same scored output — article-level regulatory cross-mapping, a dimension-by-dimension radar, and a tailored governance report.
90s
Governance Snapshot
Two screening questions followed by eight maturity questions — one per governance dimension. Auto-advance, no sidebar. Results within 90 seconds. Identical scoring engine to the full assessment.
15-25min
Full Assessment
The complete questionnaire covering all eight dimensions in depth. Generates a full governance report, article-level remediation priorities, and board, DPA, and vendor-ready output packs.
1–5
Maturity Scale
Each dimension scored 1–5, with capping logic applied when foundational gaps are detected — because you cannot sustain maturity on an unstable base.
4regs
Cross-mapped at Article Level
Every question anchors to specific articles across EU AI Act, GDPR, DORA, and NIS2 — so your output is directly traceable to regulatory obligations.
€0
Free to Participate
The 2026 launch cohort is free. Your participation directly shapes the first EU AI governance benchmark — and gives you a dated, evidence-grade baseline in return.
The Framework
Eight dimensions. Four pillars of governance maturity.
Every score rolls up from eight dimensions, grouped into four pillars covering the full AI governance lifecycle — from policy and discovery through classification, accountability, and live operations.
Pillar 01 · Discovery
Strategy & Inventory.
Does leadership endorse a written AI governance policy? Is there a complete, continuously updated inventory of all AI systems in use?
Dim. 1 — Strategy · Dim. 2 — Inventory
Pillar 02 · Classification
Risk & Data.
Are AI systems classified against EU AI Act risk tiers? Are data quality, provenance, and legal basis controls in place for all AI inputs?
Dim. 3 — Risk · Dim. 4 — Data
Pillar 03 · Accountability
Vendor & People.
Are third-party AI vendors governed with due diligence and contractual controls? Is AI literacy and accountable ownership established across the workforce?
Dim. 5 — Vendor · Dim. 6 — People
Pillar 04 · Operations
Processes & Metrics.
Are AI-specific incident playbooks tested against NIS2 (24h) and DORA (4h) reporting clocks? Is drift, bias, and hallucination monitored continuously?
Dim. 7 — Processes · Dim. 8 — Metrics
#
Dimension
What it covers
Regulations
01
DimensionStrategy
What it coversLeadership-endorsed AI governance policy with an accountable owner and cross-functional authority
Regulations
AI Act Art. 4NIS2 Art. 20DORA Art. 5
02
DimensionInventory
What it coversDiscovery and ongoing monitoring of sanctioned and shadow AI tools across the entire estate
Regulations
AI Act Art. 4NIS2 Art. 21GDPR Art. 32
03
DimensionRisk
What it coversClassification of AI systems against EU AI Act risk tiers with documented Art. 9 risk management
Regulations
AI Act Arts. 6–9Annex IIIArt. 27
04
DimensionData
What it coversData quality, provenance documentation, and legal basis controls for all AI system inputs
Regulations
AI Act Art. 10GDPR Art. 5ISO 42001
05
DimensionVendor
What it coversAI-specific due diligence, contractual provisions, audit rights, and concentration risk management
Regulations
NIS2 Art. 21DORA Arts. 28–30AI Act Art. 25
06
DimensionPeople
What it coversAI literacy programmes, accountable ownership, and workforce governance aligned to Art. 4 requirements
Regulations
AI Act Art. 4NIS2 Art. 21GDPR Art. 32
07
DimensionProcesses
What it coversAI-specific incident response playbooks tested against NIS2 (24h) and DORA (4h) regulatory clocks
Regulations
NIS2 Art. 23DORA Arts. 17–19AI Act Arts. 72–73
08
DimensionMetrics
What it coversContinuous monitoring of production AI for drift, bias, hallucination, prompt safety, and degradation
Regulations
AI Act Arts. 61, 72NIST AI RMF
The Index Roadmap
From baseline to benchmark.
2026 is the founding year. Every organisation that participates contributes to building the first EU-wide AI governance dataset. What starts as a self-assessment baseline grows into an annual peer comparison tool.
2026
Baseline — Launch Cohort
First cohort establishes the founding dataset. Scores are individual and confidential. Aggregate anonymised results form the inaugural AIGRI benchmark.
2027
Benchmarking — Peer Comparison
Year-on-year delta tracking. Sector-level peer benchmarking. Your score set against firms of comparable size and industry — answering: how do you rank?
2028+
Industry Standard — Annual Index
AIGRI becomes the go-to annual publication for EU AI governance maturity. Used by regulators, investors, and boards as an evidence-grade readiness reference.
What You Receive
Your score is just the start. Here's your full output.
Every completed assessment — Snapshot or full — produces immediate, actionable outputs tailored to your score band. The full assessment unlocks three stakeholder-ready report packs.
Governance Score
An overall 1–5 maturity score with dimension-level breakdown, capping logic explained, and your score band classification (Foundational / Developing / Established / Advanced).
Available: Snapshot + Full Assessment
Radar Chart + Risk Context
Eight-dimension radar showing your governance profile. Plus a contextual regulatory exposure estimate (€ range) and 12-month programme cost indicators calibrated to your organisation size.
Available: Snapshot + Full Assessment
Prioritised Remediation Plan
Article-level remediation priorities ranked by regulatory exposure. Each action item cross-references the specific EU AI Act, GDPR, DORA, or NIS2 article it addresses.
Available: Full Assessment
Board Report Pack
A board-ready summary translating governance scores into strategic risk language. Designed to be dropped directly into a board presentation or quarterly governance scorecard.
Available: Snapshot + Full Assessment
DPA / Audit Pack
An EU AI Act compliance table showing classification status, Art. 9 risk management evidence, and Art. 10 data governance — structured for a Data Protection Officer or external auditor.
Available: Snapshot + Full Assessment
Vendor Governance Pack
A third-party AI risk summary covering vendor classification, contractual provision status, concentration risk, and DORA TPRM obligations — ready to share with legal or procurement.
Available: Full Assessment
EU AI Governance Readiness Index
Methodology & Framework Brief
Six-slide brief covering the gap, framework, methodology, scoring output, and roadmap. Designed for press, industry partners, and prospective participants.
- Why an EU AI governance benchmark is needed and why 2026 is the right moment to establish it
- The eight dimensions, four pillars, and how they cross-map to EU AI Act, GDPR, DORA and NIS2
- Two assessment paths: the 90-second Snapshot and the full 15–25 minute assessment
- How the 1–5 scoring engine works, including the capping logic for foundational gaps
- What the 2026 launch cohort data will produce and the AIGRI annual index roadmap
Get the Index Brief
Enter your details below. We'll send the brief directly to your inbox — no spam, no sales sequence.
Methodology & Credibility
Expert-reviewed. Practitioner-built.
The AIGRI framework was developed by Montro's founders — combining 15 years of EU financial services compliance and 15 years of enterprise SaaS governance. Every question and article reference has been reviewed for regulatory accuracy.
Ankur Arora
Co-founder
15 years in enterprise SaaS and AI governance tooling. Architected the assessment scoring engine, capping logic, and report generation framework. Previously built governance tooling at enterprise scale.
Namita Razdan
Co-founder
15 years in EU financial services compliance. Expert in cross-jurisdictional regulatory frameworks — EU AI Act, GDPR, DORA, NIS2. Led compliance programmes at scale across mid-market and enterprise FS.
Methodology Note
The AIGRI assessment is an indicative self-assessment tool, not a legal audit or certification. Scores are based on self-reported answers. The framework draws on EU AI Act Regulation 2024/1689, GDPR Regulation 2016/679, DORA Regulation 2022/2554, and NIS2 Directive 2022/2555. Article references are accurate as of May 2026.
AIGRI does not constitute legal advice · All scores are confidential · Aggregate data is anonymized
AU AI Governance Readiness Index · 2026 Launch Cohort
Measure yourgovernance maturity.Shape the benchmark.
The 2026 cohort is free and open to any organisation with EU regulatory exposure. Your participation is confidential. Your contribution builds the baseline dataset for Europe's first AI governance index.
90-second Snapshot · No account required · Results immediate