EU AI Act & high-risk classification
The EU AI Act enforces phased obligations from 2026. Chinese AI products classified as high-risk or GPAI face documentation, transparency and conformity-assessment duties.
HaiWen HQ unifies go-global policy, AI regulation, data compliance and ESG disclosure into one CXO-grade decision workflow — citable, deliverable, auditable.
Free, no account needed. Within 2 business days you get a one-page obligation list for your target markets — what applies, what triggers it, what to do next, each with a source.
Counted from the content corpus as of 2026-09-12 (v2026.09); every entry links to an official source.
Where we are today
HaiWen HQ is taking on its first cohort of clients. We have no customer logos to display — a founder handles every enquiry personally.
The Policy & Standards Library, market scoring and report templates are available today; anything marked “sample” is demo data, not a real client.
Who we are →The EU AI Act enforces phased obligations from 2026. Chinese AI products classified as high-risk or GPAI face documentation, transparency and conformity-assessment duties.
GDPR · PIPL · MENA PDPL · US state laws each demand different transfer mechanisms, SCCs, DPIAs and localization — reshaping architecture and sales cycle.
Fortune-500 customers, CSRD and ISSB demand disclosure of compute carbon, fairness, data governance and supply-chain accountability — a common gap for Chinese AI vendors.
Counts come from the platform content corpus; obligations are governed by current law in each jurisdiction.
Navigate · Comply · Sustain — three verbs spanning market decisions, self-service compliance and ESG governance.
Decide where, when, and in what order
AI, data and export-control compliance
AI-native ESG framework
Recommended as the first pilot market; build PDPA, customer-data governance and AI governance evidence first.
Suitable for stage-two commercialization; focus on local hosting, cloud security and government procurement materials.
Enter priority accounts after AI risk classification, DPIA, SCC and ESG disclosure evidence is mature.
Enter carefully after export-control, state privacy, customer security review and supply-chain risk assessment.
Build AI risk classification, DPIA/SCC, supply-chain security, ESG double materiality and customer due-diligence evidence.
Start with customer-data governance, AI governance memo, model testing evidence and pilot disclosure.
Rule-based checks, estimators and reference tools: enter your situation and get an instant result for RFPs, kickoffs and internal briefings.
Filter every mapped obligation down to the ones that bind you — by market, industry and business action, with evidence and clause references.
Separate provider from deployer duties, see which of the three Art. 50 transparency obligations bind you, and whether the 2 Dec 2026 window applies.
Three steps to tell whether Art.27 requires a representative in the Union — including the three-limb exemption and the parallel UK duty.
Estimate the order of magnitude of training + inference emissions by GPU / PUE / grid factor — the built-in factors are illustrative.
Side-by-side comparison of transfer regimes (GDPR SCC, China's three routes, APPI, PDPL…) with rule-based pointers, lead times and official sources.
Pick your use cases for a directional Prohibited / High / Limited / Minimal tier and the obligations it triggers.
Estimate 12-month compliance budget, revenue release and ROI by market × product profile — every baseline and uplift factor is editable.
Bilingual lookup for legal, AI governance, ESG and trade terms — with definitions and sources.
Bilingual model answers and evidence checklists for 10 common customer due-diligence questions — copy into SIG / CAIQ questionnaires.
The Art. 14 vulnerability and severe-incident reporting duties under the EU Cyber Resilience Act bite ahead of full application: check whether you are in scope, then turn the statutory deadlines in our corpus into a copy-ready task list.
Tell us the product and the target markets, and we will help you separate “must do” from “ignore”. Free, handled by a founder.
You describe the product, target markets and timeline; we say on the spot which obligations actually land on you and which are noise. A founder sits in on every one.
Applicable rules per market, what triggers them, and the next action — each with a source link. It stands on its own even if you go no further.
Workspace subscriptions are set up by your advisor; bespoke engagements can bring in external counsel and certification bodies case by case, with scope and price agreed before anything begins.
Research plan: mapping key friction across the EU AI Act, data localization and customer DD for Chinese AI firms.
Verified public enforcement and regulatory decisions, each with a source, plus illustrative cases (fictional, for demonstration).
Research plan: what China-side cloud architectures need when customers ask AI vendors to disclose training and inference emissions.
The platform unifies business, market, data and ESG context so policy, scoring, reports and expert review requests all align around one project.
View methodology →Capture product, model capability, customer type, deployment, data processing and ESG status.
Check the company profile against target-market AI regulation, privacy, transfer, export-control, ESG disclosure and customer entry rules.
Produce a compliance score and a remediation gap list with suggested owner roles and priorities, flagging items for human review.
Create board briefs, due diligence response packs, ESG drafts and project task boards.
Start with a company profile and a market assessment. Then decide on expert review requests, due diligence responses or Enterprise / Bespoke service.
The assessment and reports live in the workspace and need a sign-in; registration is by invitation. Visitors can try the AI Compliance Advisor Demo first. Request access →