Unsere LösungFür ChampionsFür den ISB / CISOFür den DPOFür Compliance-BeauftragteFür StartupsFür HerstellerQuick-ChecksAtelierPreiseÜber unsKontaktGratis testen
DEENFR
trusttroiai
trusttroiai · The Studio · MMXXVI

Compliance
Architects.

Where compliance expertise becomes infrastructure.

The studio behind every signed Werkstück.

View
Featured Werkstück
Architecture
L1 · L2 · L3 · four crafts
Pulse
This month · May 2026
Sovereignty
EU-hosted · Germany
EU AI Act · Annex III · §4 HR

High-Risk Recruitment
Compliance Werkstück

KI-VO DSGVO CRA GSPR
Obligations
23
Regulations crossed
04
L1 anchors
18
L3 mandate refs
12
Cross-Regulation Obligation Map
Validated by Legal Expert
#
Obligation
Anchors
Status
01
Risk management across the lifecycle
L1 KI-VO Art. 9 L1 DSGVO Art. 35 · DPIA L2 Kanzlei interpretation L3 Mandant § 4.2
Validated
02
Training data governance & bias mitigation
L1 KI-VO Art. 10 L1 DSGVO Art. 5 · data minimisation L3 Mandant § 5.1
Validated
03
Transparency to deployer & data subject
L1 KI-VO Art. 13 L1 DSGVO Art. 13 L2 HR-sector pattern
Validated
04
Human oversight design & thresholds
L1 KI-VO Art. 14 L1 DSGVO Art. 22 · automated decisions L2 gap noted
Open
05
Accuracy, robustness & cybersecurity
L1 KI-VO Art. 15 L1 CRA Art. 12 L1 GSPR · safety requirements L3 Mandant § 7.4
Validated
06
Quality management system
L1 KI-VO Art. 17 L2 ISO 42001 reference L3 Mandant § 9.1
Validated
Composed in Atelier · Bound to Mandanten-Space · Deployable across similar mandates
22 / 23 validated · 1 open

Anonymised example · Structure is real · Identifying details redacted

L1
Owned by
TrustTroiAI · curated
The EU regulation corpus — KI-VO, DSGVO, CRA, Data Act and beyond. Structured into articles, recitals, annexes, cross-references.
Global · read-only
4 live · 18 roadmap
L2
Owned by
The Kanzlei
The expert's own interpretations, sector patterns, best practices — anchored to L1, deployed in every Werkstück.
Tenant-isolated
Per-Kanzlei privacy
L3
Owned by
The mandate
The mandate's own world — policies, AI inventory, audit reports, tool stack. Uploaded by the expert with the mandate's trust.
Mandate-isolated
Strict access
Wissens-
Repository
Anlage von L1, L2 und L3. Drei-Pane-Reader mit Inspector.
Compliance-
Atelier
Werkstücke werden hier komponiert — aus Chunks vieler Regularien zu einer kohärenten Pflicht für das Mandat.
Mandanten-
Space
Operative L3-Heimat — KI-Inventar, Pflichten, Evidence, Roadmap.
Trust-
Layer
Distribution dorthin, wo die Mandate ihre Arbeit leben — mit Mandanten-Kontext, ohne Datenmigration.
Pillar · 01
Mandate data
stays where it lives.
L3 is mandate-isolated by architecture. We integrate where the work is — we never migrate it to our servers without explicit consent.
Pillar · 02
Expertise
stays central.
Cronos amplifies what the architect already knows. It never replaces them. Legal Expert validation is built into every Werkstück by design.
Pillar · 03
Quality scales
the practice.
A Werkstück composed once carries forward into every mandate that needs it. Quality compounds across the practice; hours do not.
EU-hosted in Germany · No mandate data duplicated · L3-by-architecture · Native EU legal language

Regulatory

  • EDPB
    Consultation opened on Guidelines 3/2025 on the interplay between the DSA and the GDPR.
  • Liability
    Draft law modernising product liability — software and AI now expressly in scope.
  • CSRD
    Omnibus I: Parliament debates simplifying sustainability-reporting duties.

Cronos

  • 16 Aug
    Inspector live in the Chrome Web Store — the Champion door is open.
  • Agent
    Renaissance: 13 agent tools with human-on-the-loop, live trace and a trust chip per answer.
  • Search
    Champion-language search shipped — ask “what about AWS?”, get the obligation.