Explore / Governance
Governance: AI observability and safety guides
Browse DriftRail governance guides, practical examples, and production checks.
AI Audit Trails
Design AI audit trails with useful event references, access controls, integrity checks, and purpose-based retention.
Enterprise AI Governance
Guide to enterprise AI governance. Understand policies, monitoring, compliance, and best practices for governing AI at scale.
EU AI Act Compliance
Prepare evidence for an EU AI Act review by recording the system purpose, organizational role, changes, data flows, and monitoring responsibilities.
GDPR Requirements for AI Systems
Review questions for AI workflows involving personal data: purposes, roles, minimization, access, retention, and decisions requiring specialist review.
HIPAA Compliance for AI
Questions to resolve before an AI workflow processes protected health information: applicability, vendor contracts, data flows, and operational controls.
ISO 27001 Compliance for AI Systems
Prepare AI operational evidence for a ISO/IEC 27001 review without treating monitoring or a generated report as certification.
OWASP LLM Top 10: Critical Security Risks
The OWASP 2025 LLM Top 10 categories, with an application-focused checklist for selecting controls and preserving test evidence.
SOC 2 Compliance for AI Applications
Prepare AI operational evidence for a SOC 2 review without treating monitoring or a generated report as certification.
Choose an AI trace retention policy by record purpose
Build a purpose-based retention inventory for event metadata, prompt content, review records, and temporary diagnostic data.
Prepare evidence of an enforced AI access boundary
Assemble an access-control evidence record that includes the attempted request, authenticated identity, denial, and resulting resource state.
Record a human review decision in an AI workflow
Connect reviewer identity, decision, artifact revision, and resulting application action without treating a review click as completion of the whole task.
Document a change from AI advice to automated action
Review the new permissions, effects, confirmations, and recovery paths when an assistant moves from suggesting work to performing it.