You have an AI governance platform. Who measured your data?

The market for “AI Act” tools is noisy. But behind the same keyword sit two distinct jobs, often conflated — and that confusion can leave you with a gap exactly where Article 10 expects you.

Two jobs, not one

Governing compliance means organising it: classifying your systems’ risk, keeping a registry, mapping controls, producing regulator-ready reports, preserving an audit trail. That’s what AI governance platforms do — and they do it well.

Proving the data is something else: going into the training dataset and measuring its provenance, quality and bias — then turning that into a defensible dossier. It isn’t orchestration, it’s analysis.

A governance platform gives you the binder and the tabs. It does not fill in, for you, the tab where you must write what your data is actually worth.

What Article 10 actually demands

Article 10 doesn’t ask for a registry. For a high-risk system, it asks you to document and demonstrate that the training data is relevant, representative, as accurate and complete as possible, and examined for bias — with provenance traced and the whole thing maintained over time.

In other words: evidence at the data level, not a statement at the process level. “We have a data governance policy” doesn’t meet that bar. “Here, measured on this dataset, is the missing-value rate, the disparity between groups, the origin of each source” — that does.

The gap

This is where most stacks stop. The governance platform knows a data dossier is required; it doesn’t produce it. The measurements, meanwhile, live at best in the data team’s scattered notebooks — not in an opposable dossier, not maintained, not independent.

The result: on audit day, the Article 10 tab is an empty frame.

Where Conformlex fits

We don’t replace your governance platform — we fill the tab it leaves empty. Our tool runs where your data lives (in-place; it doesn’t leave), measures provenance / quality / bias, and produces the opposable Article 10 dossier, kept current when your sources change. That dossier attaches to your existing platform.

So the useful question isn’t “which AI Act platform should I pick?” but: who measured your data?

Indicative guidance, not legal advice. The AI Act is evolving (Digital Omnibus) — confirm for your case. A structured assessment removes the ambiguity.