Good Morning Jacob G. Mohammed M.
Navigating EU AI ACT in Vanta is currently cumbersome as we are waiting for the product team enable the filters w.r.t Risk Classification and Role (Producer, Provider etc.)
I completely agree with you when you say that the role of Vanta here is not just maintain policies but other system and technical specific documentation. However what seems to be unexplored yet is the part of renewing/ reviewing these artefacts when there are system changes . how can we flag changes for the documents to be set to review automatically ..rather than going and manually updating.
What i am thinking here is when kicking of EU AI ACT in Vanta - there should be a form for scoping which helps determine the role and classification basis which the applicable controls are decided. Also I would look at a Central Place (not in Documents section ) wherein we maintain a system inventory & AI Deployment approval record. Rather than maintaining excel sheet we should have the forms available in Vanta which are ready to update and maintain the record of the changes.
.png)