| 📦 Inventaire & Classification |
| Systèmes IA | 3 | 15 | 50 | ∞ |
| Utilisateurs (RBAC 8 roles) | 5 | 15 | ∞ | ∞ |
| Wizard EU AI Act 8 étapes | ✓ | ✓ | ✓ | ✓ |
| Score de conformité 0-100 temps réel | ✓ | ✓ | ✓ | ✓ |
| Classification EU AI Act automatique | ✓ | ✓ | ✓ | ✓ |
| Autorité de surveillance compétente | ✓ | ✓ | ✓ | ✓ |
| Snapshots versions horodatés | – | ✓ | ✓ | ✓ |
| AI-BOM : traçabilité composants | – | – | ✓ | ✓ |
| 📄 Documents réglementaires auto-générés |
| AIPD : Art.35 RGPD (PDF) | – | ✓ | ✓ | ✓ |
| FRIA : Art.27 EU AI Act (PDF) | – | ✓ | ✓ | ✓ |
| Notice Art.13 RGPD + Art.50 AI Act | – | ✓ | ✓ | ✓ |
| Registre Art.49 : PDF | – | ✓ | ✓ | ✓ |
| Registre Art.49 : Excel | – | – | ✓ | ✓ |
| Déclaration de conformité Art.47 | – | ✓ | ✓ | ✓ |
| Politique IA : ISO 42001 §5.2 | – | ✓ | ✓ | ✓ |
| Registre des Risques IA : ISO 23894 | – | ✓ | ✓ | ✓ |
| Rapport Impact Assessment : ISO 42005 | – | ✓ | ✓ | ✓ |
| SoA PIMS : ISO 27701 | – | – | ✓ | ✓ |
| Plan de conformité 3 phases | – | – | ✓ | ✓ |
| Vérification intégrité SHA-256 publique | ✓ | ✓ | ✓ | ✓ |
| 🏛️ Modules conformité multi-normes |
| EU AI Act : mapping obligations / articles | ✓ | ✓ | ✓ | ✓ |
| ISO 42001 : 38 contrôles Annexe A | – | ✓ | ✓ | ✓ |
| RGPD / AIPD Art.35 : workflow complet | – | ✓ | ✓ | ✓ |
| ISO 23894 : registre des risques IA | – | ✓ | ✓ | ✓ |
| ISO 42005 : impact assessment IA | – | ✓ | ✓ | ✓ |
| NIS2 : cybersécurité systèmes critiques | – | – | ✓ | ✓ |
| CRA : résilience produits IA connectes | – | – | ✓ | ✓ |
| ISO 27001 : 45 contrôles cartographiés sur les 93 de l'Annexe A | – | – | ✓ | ✓ |
| ISO 27701 / PIMS : 45 contrôles vie privée | – | – | ✓ | ✓ |
| 🔄 Workflow & Collaboration |
| Workflow ICO - DPO | – | ✓ | ✓ | ✓ |
| Workflow ICO - RSSI - DPO - Direction | – | – | ✓ | ✓ |
| Notifications email automatiques | – | ✓ | ✓ | ✓ |
| Gestion des incidents IA | – | ✓ | ✓ | ✓ |
| Alertes réglementaires automatisées | – | – | ✓ | ✓ |
| Dashboard RSSI dédié | – | – | ✓ | ✓ |
| 🔌 API & Intégrations |
| API REST v1 (14 endpoints, X-API-Key) | – | – | ✓ | ✓ |
| Scopes read / read_write | – | – | ✓ | ✓ |
| SSO / SAML | – | – | – | ✓ |
| Multi-organisations / multi-filiales | – | – | – | Sur étude |
| 🔒 Sécurité & Hébergement |
| Isolation multi-tenant totale | ✓ | ✓ | ✓ | ✓ |
| Hébergement OVH : datacenter France (UE) | ✓ | ✓ | ✓ | ✓ |
| CSRF, bcrypt, JWT, rate limiting | ✓ | ✓ | ✓ | ✓ |
| Audit log complet (qui, quoi, quand) | – | ✓ | ✓ | ✓ |
| SLA contractuel | – | – | – | ✓ |