Practical, auditable and interoperable compliance for trustworthy AI
AICONFORM responds to the growing need for practical, auditable and interoperable compliance tools in Europe. As organisations deploy AI systems and digital services, they must interpret and apply multiple regulatory frameworks, including the AI Act, NIS2, eIDAS 2.0 and GDPR.
A clear narrative of the problem, the AICONFORM response and its validation in real operational environments.
These obligations are often described in legal language, distributed across several sources, and updated over time, creating a significant burden for public administrations, SMEs and regulated sectors.
The project addresses this challenge by developing an agentic framework that transforms regulatory text into machine-readable obligations, executable checks and structured conformity documentation. AIConform supports the full compliance lifecycle: from extracting obligations and classifying risks, to generating evidence, signing reports, maintaining audit trails and supporting human oversight.
Through three pilots in public administration, manufacturing and energy, the project will validate how automated regulatory compliance can reduce manual effort, improve accuracy, preserve trust and support responsible AI adoption in real operational environments.
Α snapshot of AICONFORM’s scope, timeline, governance and expected impact.
| Project Acronym | AICONFORM |
|---|---|
| Full Title | Agentic Framework for Automated Regulatory Compliance |
| Grant Agreement | 101298515 |
| Programme | Digital Europe Programme |
| Call / Topic | DIGITAL-2025-AI-08-COMPLIANCE |
| Duration | 24 months · 1 June 2026 – 31 May 2028 |
| Coordinator | Ministry of Digital Governance, Greece (MoDG) |
| Core Focus | Automated extraction, verification, monitoring and auditing of regulatory obligations across sectors |
| Pilots | Public administration, manufacturing and energy |
| Key Targets | ≥ 30% reduction in reporting time |
Objectives
AICONFORM is driven by a clear set of objectives designed to make EU regulatory compliance more actionable, transparent and scalable.
Automate obligation extraction from EU and sectoral regulatory texts using AI/NLP methods and legal annotation workflows to identify actors, duties, evidence items, risks and deadlines.
Build a compliance knowledge graph and rule engine that can organise, version and operationalise regulatory obligations as machine-readable checks.
Support conformity assessment and documentation through guarded reasoning agents, explainable outputs, human oversight and structured templates for high-risk and non-high-risk AI contexts.
Enable secure, privacy-preserving reporting by integrating data governance controls, homomorphic encryption, differential privacy and audit-ready data trails.
Embed digital trust services such as qualified e-signatures, e-seals, timestamping and EUDI Wallet-based identity flows to ensure the legal reliability of compliance artefacts.
Validate the framework in three operational pilots across public administration, manufacturing and energy.
Release open-source APIs, templates, SDKs and conformance materials that enable uptake by SMEs, public bodies and technology providers.
Build capacity through training, e-learning, workshops and policy engagement, ensuring that project results can be used beyond the consortium.
Target Groups
AICONFORM is designed for organisations that need to understand, document, monitor and prove compliance with evolving EU digital rules. The project addresses both direct users of the framework and wider communities that benefit from more transparent and trustworthy AI governance.
AICONFORM supports faster, data-driven and auditable oversight, helping authorities reduce reporting burden, improve decision-making and strengthen trust between regulators and regulated entities.
Industrial operators can embed conformity checks into production, quality control and incident workflows, supporting faster market access, clearer documentation and lower compliance costs.
Energy providers can manage obligations in GDPR, NIS2 and eIDAS environments through secure, privacy-preserving data reporting and legally valid digital transactions.
Open-source APIs, SDKs and templates can lower the cost of integrating compliance-by-design into AI and digital products.
Trust service providers and assessment bodies can explore new ways to integrate qualified signatures, seals, timestamping and identity workflows into compliance processes.
Supervisory bodies can benefit from structured evidence, anomaly detection, incident workflows and auditable trails that enhance oversight capacity.
Pilot evidence, policy briefs and technical templates can inform guidance, standards and European data space interoperability.
The framework contributes to transparency, explainability, accountability and human oversight in AI governance.
Citizens benefit indirectly from safer services, stronger rights protection, clearer accountability and more trustworthy AI-enabled public and industrial systems.
Impact
AICONFORM aims to make compliance faster, more accurate and more trustworthy. Its impact will be measured through pilot evidence, workflow baselines, user feedback, training results, conformance tests and uptake metrics.
AICONFORM advances the state of digital compliance by combining AI/NLP obligation extraction, legal knowledge graphs, executable rules, privacy-preserving reporting, qualified trust services and interoperable APIs. Its modular architecture supports traceability, explainability and adoption across sectors.
By targeting a reduction of at least 30% in compliance reporting time, the project helps public authorities and private operators redirect resources from manual interpretation and documentation towards innovation, operations and service delivery.
The project will produce policy briefs, standardisation input and evidence from real pilots to inform EU and national discussions on AI compliance tooling, conformity assessment and data space interoperability.
AICONFORM supports citizens rights, transparency and accountability by helping organisations maintain safer, auditable and privacy-preserving AI-enabled services.
Through training, workshops, e-learning and practical playbooks, the project will equip at least 200 professionals with skills to adopt and use AIConform outputs responsibly.
Use Cases
AICONFORM will be validated in three operational environments where compliance is both critical and resource-intensive. These pilots demonstrate how the framework can be adapted to different sectors while preserving common principles: traceability, privacy, auditability, human oversight and interoperability.
Public Administration Compliance
The public administration pilot validates AICONFORM in governmental settings.
In Greece, the system will support ex-ante compliance screening of AI project proposals submitted by ministries, helping classify AI systems, identify risks and generate draft compliance reports while maintaining human oversight.
In Andalusia, the public administration context will demonstrate how compliance processes for grants, tenders and agreements can be automated, made more transparent and supported by auditable evidence trails.
Trusted Compliance
Data Automation for
AI-Enhanced Manufacturing
The manufacturing pilot, led by FACTOR, explores how AICONFORM can support industrial operators using AI in production, quality assurance, predictive maintenance and workforce-related workflows.
The pilot will generate compliance artefacts, support risk classification, produce technical documentation blocks, enable incident workflows and anchor approvals to tamper-evident audit trails.
Privacy-Preserving
Compliance in the
Energy Sector
The energy pilot, led by VOLTIVA, validates AIConform in electricity retail and energy service operations.
It focuses on regulatory obligations linked to GDPR, NIS2 and eIDAS 2.0, using secure data reporting, privacy-preserving mechanisms and legally valid digital transactions to reduce administrative overhead and strengthen trust in energy services.
