The EU AI Act attaches duties to use-case class and role (provider, deployer). No platform should auto-declare high-risk as a product feature without legal review.
What OptimaTrust stores: intended purpose, use-case class, obligations, changes, hashed evidence, and framework overlays in OptimaTrust language. What it does not store: a substitute for conformity assessment by a notified body where the law requires one.
Operators should still run security and safety tests. The Act’s documentation duties are easier when the technical record already exists.
For enterprise regulatory programs beyond AI, use a GRC system. OptimaTrust remains the AI estate’s assurance record.