Trust & Governance
How Grecta’s determinations are made, reviewed and changed, and how we govern the data you trust us with.
Governed Determinations
A compliance conclusion is only useful if you can defend it.
Deterministic logic
Same inputs, same determination. No generative model decides whether an obligation applies.
Lawyer-owned rulebook
Every rule is written, reviewed and approved by a qualified regulatory lawyer before it goes live.
Traceable reasoning
Each result shows the provision, the facts it relied on and the reasoning that connects them.
When the law or your product changes, the determination is recalculated and the earlier version is kept.
Accountable to a Person
Credentials
Led by Yuliia Habriiel, LLB, AIGP, author of a 22-chapter EU AI Act field manual.
Registered company
Grecta is operated by EuroGRC OÜ, registered in Estonia under code 17416756.
Public commitments
Signatory of the EU AI Pact and EuroStack, with direct engagement with University of Cambridge on the HEAT methodology.
Clear limits
Grecta provides regulatory analysis, not legal advice. Compliance responsibility stays with you.
How We Govern Change
Rulebook changes
Every rule change is versioned, dated and linked to the legal source behind it.
Our own AI Act status
Our engine executes human-written rules. We assess ourselves as we assess clients.
Incident handling
Security incidents affecting your data are notified to you without undue delay.
Sub-processors
Changes to our sub-processors are notified before they take effect.
Need This for Procurement?
Request our data processing agreement, sub-processor list and security questionnaire answers for your vendor review.
Request governance documentsTrust & Governance FAQs
No. Grecta is regulatory analysis software. Each determination reflects the information you provide and the law as mapped at the time of evaluation. Responsibility for compliance, including any conformity assessment, stays with the provider or deployer.
A qualified regulatory lawyer reviews every change to the law before it reaches the rulebook. Affected determinations are recalculated, and you can see what changed, when and why.
No. Determinations come from a deterministic rule engine authored by a lawyer. The same facts always produce the same result, and every result cites the provision behind it.
See it on your own product
Start with a free assessment of one product, or join the paid pilot for evidence, templates and a review session.
Join the pilotThe free assessment covers one product. No commitment.