1NTEGRAGUARD — AI Governance Readiness Audit Explainer & Regulatory Catalogue

What the Standalone Audit Is

The 1NTEGRAGUARD Standalone AI Governance Audit is a self-contained, offline-capable assessment an organisation runs to measure its AI governance readiness against ISO/IEC 42001 and a broad multi-jurisdiction regulatory set.

It produces a weighted Governance Readiness Index (GRI) out of 1,000, a five-band maturity rating, a prioritised gap analysis, and a regulation-aligned policy pack — all generated from a single offline HTML file that works without an account, without a network connection, and without sending any data to a third party.

The audit is a Tier-1 self-attestation readiness assessment — it identifies gaps and guides remediation, and is not a formal ISO/IEC 42001 certification by an accredited body.

How It Works

01 · Request

Distributed as a single offline HTML file on request — contact 1NDYGO AI for your copy. No account, no network, no data leaves the organisation.

02 · Self-attest

Answer ~60 weighted questions across 7 governance domains for the chosen jurisdiction.

03 · Score

Receive a GRI out of 1,000, a maturity band, and a prioritised gap analysis instantly.

04 · Policy pack

Generate a regulation-aligned policy pack per weak domain, with a post-adoption re-score.

The 7 Weighted Governance Domains

AI Governance & Ethics

25% weight · 250 pts

Ownership, ethical principles, and oversight structures for all AI systems

Privacy & Data Protection

20% weight · 200 pts

Lawful data handling, consent, minimisation, and protection aligned to AU Privacy Act and GDPR

Technical Risk & Safety

15% weight · 150 pts

System resilience, adversarial testing, failure modes, and incident response

Regulatory Compliance

15% weight · 150 pts

Mapping all applicable AI regulations with documented compliance evidence

Transparency & Bias

10% weight · 100 pts

AI explainability, disclosure of use, and bias detection/mitigation

Human Oversight

10% weight · 100 pts

Human-in-the-loop mechanisms, override capabilities, and escalation procedures

Accountability

5% weight · 50 pts

Clear accountability structures, audit trails, and responsibility assignment

Scoring & Maturity Bands (GRI 0–1,000)

Critical

0–199

Foundational

200–399

Developing

400–599

Established

600–799

Optimised

800–1,000

Master Regulatory Catalogue

Every jurisdiction, region and sector the standalone audit supports. The engine composes a country baseline with optional state/region and sector overlays to produce the applicable regulatory set for each assessment. Click any card to expand it.

International Cross-Cutting Frameworks

ISO/IEC 42001:2023NIST AI RMF v1.1EU AI ActOECD AI PrinciplesGDPR

These global standards are mapped into every assessment regardless of jurisdiction, forming the backbone of the scoring engine.

Country Baselines (8)

ISO/IEC 42001:2023NIST AI RMF v1.1AU AI Ethics PrinciplesOECD AI PrinciplesEU AI ActPrivacy Act 1988Australian Consumer Law 2010Copyright Act 1968

Data Protection

Privacy Act 1988

Consumer Law

ACL 2010

Intellectual Property

Ethics Framework

AU AI Ethics Principles

Lead Regulator

OAIC

Per-Domain Regulatory References (D1–D7)

AI Governance & Ethics

ISO/IEC 42001:2023 Clause 5.2, AU AI Ethics Principle 1

Privacy & Data Protection

Australian Privacy Act 1988, GDPR Art. 5, 25, 32

Technical Risk & Safety

EU AI Act Art. 15, ISO/IEC 42001 Annex A.15, ACL 2010 Sections 54-56

Regulatory Compliance

EU AI Act Art. 6, ISO/IEC 42001 Clause 4.2, ACL 2010 Section 18, Copyright Act 1968

Transparency & Bias

EU AI Act Art. 13, GDPR Art. 22

Human Oversight

EU AI Act Art. 14, ISO/IEC 42001 Annex A.2

Accountability

ISO/IEC 42001 Clause 5, AU AI Ethics Principle 8, Copyright Act 1968 Sections 31-36

ISO/IEC 42001:2023NIST AI RMF v1.1NZ AI Strategy / Algorithm CharterOECD AI PrinciplesEU AI ActPrivacy Act 2020Consumer Guarantees Act 1993Copyright Act 1994

Data Protection

Privacy Act 2020

Consumer Law

Consumer Guarantees Act 1993

Intellectual Property

Ethics Framework

NZ AI Strategy / Algorithm Charter

Lead Regulator

OPC NZ

Per-Domain Regulatory References (D1–D7)

AI Governance & Ethics

ISO/IEC 42001:2023 Clause 5.2, NZ AI Strategy

Privacy & Data Protection

Privacy Act 2020, GDPR Art. 5, 25, 32

Technical Risk & Safety

EU AI Act Art. 15, ISO/IEC 42001 Annex A.15, Consumer Guarantees Act 1993

Regulatory Compliance

EU AI Act Art. 6, ISO/IEC 42001 Clause 4.2, Consumer Guarantees Act 1993, Copyright Act 1994

Transparency & Bias

EU AI Act Art. 13, GDPR Art. 22

Human Oversight

EU AI Act Art. 14, ISO/IEC 42001 Annex A.2

Accountability

ISO/IEC 42001 Clause 5, Copyright Act 1994

ISO/IEC 42001:2023NIST AI RMF v1.1UK AI Regulation (white paper)OECD AI PrinciplesEU AI ActUK GDPR + DPA 2018Consumer Rights Act 2015Copyright, Designs and Patents Act 1988

Data Protection

UK GDPR

Consumer Law

Consumer Rights Act 2015

Intellectual Property

Ethics Framework

UK AI Regulation principles

Lead Regulator

ICO

Per-Domain Regulatory References (D1–D7)

AI Governance & Ethics

ISO/IEC 42001:2023 Clause 5.2, UK AI Regulation principles

Privacy & Data Protection

UK GDPR + Data Protection Act 2018, GDPR Art. 5, 25, 32

Technical Risk & Safety

EU AI Act Art. 15, ISO/IEC 42001 Annex A.15, Consumer Rights Act 2015

Regulatory Compliance

EU AI Act Art. 6, ISO/IEC 42001 Clause 4.2, Consumer Rights Act 2015, Copyright, Designs and Patents Act 1988

Transparency & Bias

EU AI Act Art. 13, UK GDPR Art. 22

Human Oversight

EU AI Act Art. 14, ISO/IEC 42001 Annex A.2

Accountability

ISO/IEC 42001 Clause 5, Copyright, Designs and Patents Act 1988

ISO/IEC 42001:2023NIST AI RMF v1.1EU AI ActOECD AI PrinciplesGDPRConsumer Rights DirectiveDSM Copyright Directive

Data Protection

GDPR

Consumer Law

Consumer Rights Directive

Intellectual Property

DSM Copyright Directive

Ethics Framework

EU Ethics Guidelines for Trustworthy AI

Lead Regulator

EDPB

Per-Domain Regulatory References (D1–D7)

AI Governance & Ethics

ISO/IEC 42001:2023 Clause 5.2, EU AI Act Art. 4 (AI literacy), EU Ethics Guidelines

Privacy & Data Protection

GDPR (Regulation 2016/679), EU AI Act Art. 10 (data governance)

Technical Risk & Safety

EU AI Act Art. 15 (accuracy), ISO/IEC 42001 Annex A.15, Consumer Rights Directive

Regulatory Compliance

EU AI Act Art. 6-9, ISO/IEC 42001 Clause 4.2, Consumer Rights Directive, DSM Copyright Directive

Transparency & Bias

EU AI Act Art. 13 (transparency), Art. 52, GDPR Art. 22

Human Oversight

EU AI Act Art. 14 (human oversight), ISO/IEC 42001 Annex A.2

Accountability

ISO/IEC 42001 Clause 5, EU AI Act Art. 17-18 (responsibilities), DSM Copyright Directive

ISO/IEC 42001:2023NIST AI RMF v1.1US AI Bill of RightsOECD AI PrinciplesEU AI ActCCPA/CPRA + state privacy lawsFTC Act §5US Copyright Act

Data Protection

US state privacy laws (CCPA/CPRA)

Consumer Law

FTC Act §5

Intellectual Property

US Copyright Act

Ethics Framework

US AI Bill of Rights / NIST AI RMF

Lead Regulator

FTC

Per-Domain Regulatory References (D1–D7)

AI Governance & Ethics

ISO/IEC 42001:2023 Clause 5.2, US AI Bill of Rights, NIST AI RMF GOVERN

Privacy & Data Protection

CCPA/CPRA + state privacy laws, GDPR Art. 5, 25, 32

Technical Risk & Safety

EU AI Act Art. 15, ISO/IEC 42001 Annex A.15, FTC Act §5 (unfair/deceptive)

Regulatory Compliance

EU AI Act Art. 6, ISO/IEC 42001 Clause 4.2, FTC Act §5, US Copyright Act

Transparency & Bias

EU AI Act Art. 13, state AI transparency laws, GDPR Art. 22

Human Oversight

EU AI Act Art. 14, ISO/IEC 42001 Annex A.2

Accountability

ISO/IEC 42001 Clause 5, US Copyright Act, FTC Act §5

ISO/IEC 42001:2023NIST AI RMF v1.1Model AI Governance FrameworkOECD AI PrinciplesEU AI ActPDPA 2012Consumer Protection (Fair Trading) ActCopyright Act 2021

Data Protection

PDPA 2012

Consumer Law

Consumer Protection (Fair Trading) Act

Intellectual Property

Ethics Framework

Model AI Governance Framework

Lead Regulator

PDPC

Per-Domain Regulatory References (D1–D7)

AI Governance & Ethics

ISO/IEC 42001:2023 Clause 5.2, Model AI Governance Framework

Privacy & Data Protection

Personal Data Protection Act 2012, GDPR Art. 5, 25, 32

Technical Risk & Safety

EU AI Act Art. 15, ISO/IEC 42001 Annex A.15, Consumer Protection (Fair Trading) Act

Regulatory Compliance

EU AI Act Art. 6, ISO/IEC 42001 Clause 4.2, Consumer Protection (Fair Trading) Act, Copyright Act 2021

Transparency & Bias

EU AI Act Art. 13, PDPA, GDPR Art. 22

Human Oversight

EU AI Act Art. 14, ISO/IEC 42001 Annex A.2

Accountability

ISO/IEC 42001 Clause 5, Copyright Act 2021

ISO/IEC 42001:2023NIST AI RMF v1.1Directive on Automated Decision-MakingOECD AI PrinciplesEU AI ActPIPEDA / provincial privacy lawsConsumer protection legislationCopyright Act

Data Protection

PIPEDA

Consumer Law

provincial consumer protection law

Intellectual Property

Ethics Framework

Directive on Automated Decision-Making

Lead Regulator

OPC

Per-Domain Regulatory References (D1–D7)

AI Governance & Ethics

ISO/IEC 42001:2023 Clause 5.2, Directive on Automated Decision-Making

Privacy & Data Protection

PIPEDA / provincial privacy laws, GDPR Art. 5, 25, 32

Technical Risk & Safety

EU AI Act Art. 15, ISO/IEC 42001 Annex A.15, provincial consumer protection law

Regulatory Compliance

EU AI Act Art. 6, ISO/IEC 42001 Clause 4.2, provincial consumer protection law, Copyright Act

Transparency & Bias

EU AI Act Art. 13, PIPEDA, GDPR Art. 22

Human Oversight

EU AI Act Art. 14, ISO/IEC 42001 Annex A.2

Accountability

ISO/IEC 42001 Clause 5, Copyright Act

ISO/IEC 42001:2023NIST AI RMF v1.1OECD AI PrinciplesEU AI ActGDPR

Data Protection

applicable data protection law

Consumer Law

applicable consumer protection law

Intellectual Property

applicable copyright law

Ethics Framework

OECD AI Principles

Lead Regulator

relevant regulator

Per-Domain Regulatory References (D1–D7)

AI Governance & Ethics

ISO/IEC 42001:2023 Clause 5.2, OECD AI Principles

Privacy & Data Protection

Applicable data protection law, GDPR Art. 5, 25, 32

Technical Risk & Safety

EU AI Act Art. 15, ISO/IEC 42001 Annex A.15, applicable consumer protection law

Regulatory Compliance

EU AI Act Art. 6, ISO/IEC 42001 Clause 4.2, applicable consumer and copyright law

Transparency & Bias

EU AI Act Art. 13, GDPR Art. 22

Human Oversight

EU AI Act Art. 14, ISO/IEC 42001 Annex A.2

Accountability

ISO/IEC 42001 Clause 5, applicable copyright law

State / Region Overlays

NSW (New South Wales)

NSW PPIP Act 1998NSW Government Information (Public Access) Act 2009NSW AI Assurance Framework

dataProtection: Privacy and Personal Information Protection Act 1998 (NSW)

VIC (Victoria)

VIC Privacy and Data Protection Act 2014VIC Health Records Act 2002

dataProtection: Privacy and Data Protection Act 2014 (VIC)

QLD (Queensland)

QLD Information Privacy Act 2009QLD Public Health Act 2005

dataProtection: Information Privacy Act 2009 (QLD)

WA (Western Australia)

WA Privacy and Responsible Information Sharing Act 2024

dataProtection: Privacy and Responsible Information Sharing Act 2024 (WA)

SA (South Australia)

SA Government Information Sharing Guidelines

TAS (Tasmania)

TAS Personal Information Protection Act 2004

dataProtection: Personal Information Protection Act 2004 (TAS)

ACT (Australian Capital Territory)

ACT Information Privacy Act 2014ACT Health Records and Privacy Act 1997

dataProtection: Information Privacy Act 2014 (ACT)

NT (Northern Territory)

NT Information Act 2002

dataProtection: Information Act 2002 (NT)

England

UK Government AI Regulation white paper

Scotland

Scots consumer lawScottish AI Strategy

consumer: Consumer Protection (Amendment) Regulations 2012

Wales

Wales AI StrategyWelsh public-sector data policy

Northern Ireland

NI AI Strategy

dataProtection: UK GDPR + NI specific provisions

Germany

Bundesdatenschutzgesetz (BDSG)BSI AI guidance

regulator: BSI

dataProtection: BDSG + GDPR

France

Loi Informatique et LibertésLoi IA (French AI Act)CNIL AI guidance

regulator: CNIL

dataProtection: Loi Informatique et Libertés + GDPR

Italy

Codice PrivacyGarante AI guidance

regulator: Garante

dataProtection: Codice Privacy + GDPR

Spain

LOPDGDDAEPD AI guidanceSpanish National AI Strategy

regulator: AEPD

dataProtection: LOPDGDD + GDPR

Netherlands

UAVG (Dutch GDPR implementation)Dutch AI coordination

regulator: AP

dataProtection: UAVG + GDPR

Ireland

Data Protection Act 2018 (IE)DPC AI guidance

regulator: DPC

dataProtection: Data Protection Act 2018 + GDPR

Sweden

Swedish GDPR implementationIMY AI guidance

regulator: IMY

dataProtection: Swedish GDPR implementation

Poland

RODO (Polish GDPR implementation)UODO AI guidance

regulator: UODO

dataProtection: RODO implementation + GDPR

Belgium

Belgian Data Protection ActBelgian AI Act (2024)

regulator: APD/GBA

dataProtection: Belgian DPA + GDPR

Austria

Datenschutzgesetz (DSG)Austrian AI Strategy

regulator: DSB

dataProtection: DSG + GDPR

California

California Consumer Privacy Act (CCPA/CPRA)CA SB 942 AI Transparency Act 2024CA AB 2013 (AI training data disclosure)

dataProtection: CCPA/CPRA + CA SB 942 (AI Transparency Act)

New York

NY SHIELD ActNYC Local Law 144 (AEDT)NY DFS Part 500

dataProtection: NY SHIELD Act + NYC Local Law 144

Texas

Texas Data Privacy and Security Act (TDPSA)

dataProtection: Texas Data Privacy and Security Act (TDPSA)

Illinois

Biometric Information Privacy Act (BIPA)IL HB 3773 (AI)

dataProtection: BIPA + IL HB 3773

Virginia

Virginia Consumer Data Protection Act (VCDPA)

Colorado

Colorado Privacy Act (CPA)Colorado AI Act (SB 24-205)

dataProtection: Colorado Privacy Act (CPA) + Colorado AI Act

Massachusetts

MA Data Privacy Law (201 CMR 17.00)MA AI Advisory Council guidance

Washington

WA My Health My Data ActWA SB 5350 (AI)

dataProtection: Washington My Health My Data Act + SB 5350

Oregon

Oregon Consumer Privacy Act (OCPA)

Connecticut

Connecticut Data Privacy Act (CTDPA)CT SB 2 (AI)

Utah

Utah Consumer Privacy Act (UCPA)

Ontario

Personal Health Information Protection Act (PHIPA)FIPPA (ON)

dataProtection: PHIPA 2004

Quebec

Law 25 (Loi 25)Quebec AI Strategy

dataProtection: Law 25 (Loi 25)

British Columbia

Personal Information Protection Act (BC)FIPPA (BC)

dataProtection: PIPA BC + FIPPA

Alberta

Personal Information Protection Act (Alberta)

dataProtection: PIPA Alberta

Manitoba

PHIA ManitobaFIPPA Manitoba

dataProtection: PHIA + FIPPA (MB)

Saskatchewan

LA FOIP (Saskatchewan)

dataProtection: LA FOIP (Saskatchewan)

Nova Scotia

PHIA Nova ScotiaFOIPOP Nova Scotia

dataProtection: PHIA + FOIPOP (NS)

Sector Overlays (21)

General / Professional Services

Professional conduct standardsISO/IEC 42001 Clause 4.2 context

Domains: D1

Financial Services (Banking, Insurance, Superannuation)

APRA CPS 230 (Operational Risk)ASIC RG 271 (IDR)Anti-Money Laundering and Counter-Terrorism Financing Act 2006Financial Services Reform ActBFSO Code

Domains: D1, D2, D3, D6

Healthcare & Medical

My Health Records Act 2012Therapeutic Goods Act 1989Health Privacy PrinciplesISO/IEC 42001 Clause 4.2

Domains: D2, D1, D6

Education (Schools K-12)

Student privacy provisionsChild safety standardsState education department AI policies

Domains: D2, D5

Education (Higher Education & Research)

TEQSA Higher Education StandardsNational Statement on Ethical Conduct in Human ResearchHREC research ethics

Domains: D1, D2

Employment & Recruitment

Fair Work Act 2009 (AU)EEOC guidance (US)AHRC guidelinesNYC Local Law 144

Domains: D5, D6

Telecommunications

Telecommunications Act 1997 (AU)Telecommunications (Interception and Access) Act 1979ACMA codes

Domains: D2, D3

Critical Infrastructure (Energy, Water, Transport)

SOCI Act 2018 (AU)ACSC Essential EightNIS2 Directive (EU)CISA guidance (US)

Domains: D3, D1

Defence & National Security

ASD Information Security Manual (ISM)Defence Industry Security Programme (DISP)SOCI Act 2018ITAR (US)

Domains: D3, D1, D2

Government (Federal)

Protective Security Policy Framework (PSPF)DTA AI Ethics PrinciplesHosting Certification Framework

Domains: D1, D2

Government (State / Territory)

State government data sharing frameworksState AI assurance frameworks

Domains: D1, D2

Government (Local)

Local government privacy codesSmart City AI guidelines

Domains: D2, D5

Retail & Consumer

Australian Consumer Law 2010Consumer data protectionsACCC AI guidance

Domains: D4, D5

Manufacturing

Product safety standardsISO 9001Work Health and Safety Act 2011

Domains: D3

Technology & SaaS

SOC 2ISO/IEC 27001ISO/IEC 42001EU AI Act (provider obligations)

Domains: D3, D4

Legal Services

Legal professional privilegeLaw society AI ethics guidelinesSolicitors' conduct rules

Domains: D1, D6

Real Estate & Property

PEXA participation rulesState property and conveyancing lawsACCC property guidance

Domains: D4

Agriculture

Biosecurity Act 2015Agricultural data ownership codesState farm data codes

Domains: D2

Mining & Resources

WHS (Mines) regulationsEnvironmental data reportingISO 14001

Domains: D3

Media & Entertainment

Domains: D5, D4

Not-for-Profit

ACNC governance standardsCharity data codesFundraising regulations

Domains: D1, D2

Your Jurisdiction — Tailored Appendix

Select a recipient's country, state/region and sector to generate the exact composed regulatory set, frameworks and law names their audit would reference.

Country

State / Region

Industry Sector

Your Composed Jurisdiction

Frameworks Referenced

Per-Domain Regulatory References (D1–D7)

Tip: change any selector above to re-compose the frameworks, law names and per-domain references live — exactly as the audit engine does for a recipient.

Ready to get started?

The standalone audit is distributed as an offline HTML pack on request — it is not available online. Contact 1NDYGO AI at 1ntegraguard@1ndygo-ai.com to receive your copy and begin your self-attestation.

Get the standalone audit →