Skip to main content

Start Here

The Fastest Path to AI Compliance That Actually Works

Most teams fail AI compliance because they start with tools instead of decisions. HAIEC exists to remove uncertainty—with deterministic scanning, audit-ready evidence, and governance that runs where code lives.

🎯 Who Are You?

Choose your role to see your fastest path:

🔴 Executive Path

Make the Right Risk Decision

What decision are you trying to make right now?

"Are we exposed by our AI systems?"

"Are we ready for an audit or regulator?"

"Can we prove compliance if challenged?"

"Can we safely deploy AI in production?"

1. AI Risk Snapshot

Decision you unlock:

"I can clearly explain our AI risk to leadership—with evidence, not guesses."

What HAIEC does:

  • 24 security rules covering OWASP LLM Top 10
  • 3-Tier scanning: GitHub → Static → Runtime
  • Zero AI guessing, 100% reproducible
  • Cryptographic proof included
Tier: Free → Starter
Time: 30 seconds
→ Run Free AI Risk Scan→ View Sample Report→ Attack Surface Playbook

2. Audit Readiness

Decision you unlock:

"We know exactly what evidence is required—before the audit starts."

What HAIEC does:

  • SOC 2, ISO 27001/42001, EU AI Act, NYC LL144
  • CSM6 Framework 6-layer governance
  • Law Finder: Which regulations apply?
  • Pre-audit checklists included
Tier: Starter → Pro
Time: 15 minutes
→ Start Compliance Wizard→ Law Finder Tool→ AI Readiness Assessment

3. Audit-Defensible Proof

Decision you unlock:

"I can confidently say yes to auditors, customers, or regulators—and prove it."

What HAIEC does:

  • Cryptographically signed Trust Artifacts
  • SHA-256 hashed evidence packages
  • Public verification URLs
  • Kill switch documentation included
Tier: Pro → Business
Time: Same-day badge
→ View Sample Artifact→ Badge Gallery→ Generate Trust Artifact

4. Production Governance

Decision you unlock:

"Risky AI will not ship without visibility or override—enforced automatically."

What HAIEC does:

  • GitHub App: Every PR gets scanned
  • CI/CD pipeline enforcement
  • Runtime monitoring with kill switch
  • Continuous compliance evidence
Tier: Business → Enterprise
Time: 1 hour to first PR scan
→ Install GitHub App→ CI/CD Setup Guide→ Runtime Controls

🟡 Manager Path

Get Clarity, Then Recommend

This path exists to reduce confusion and speed internal alignment—not to sell prematurely.

What do you need most right now?

Understand AI compliance well enough to brief leadership

Align stakeholders around a clear recommendation

Prepare for an upcoming audit or review

1. AI Compliance Orientation

Decision you unlock:

"I understand the landscape and can explain it without jargon."

  • AI Compliance 101 guide
  • CSM6 Framework primer
  • AI Penalty Tracker (real fines)
  • Framework comparison matrix
Tier: Free
Time: 30 minutes reading
→ AI Compliance 101→ CSM6 Framework→ Penalty Tracker

2. Internal Alignment Pack

Decision you unlock:

"Our stakeholders agree on next steps—no more debate spirals."

  • Free compliance guide (PDF)
  • Visual explainers for presentations
  • Real examples from other companies
  • Security playbook templates
Tier: Free → Starter
Time: Presentation-ready
→ Download Guide→ Security Playbooks→ Case Studies

3. Pre-Audit Readiness

Decision you unlock:

"We know where we stand before involving auditors—no surprises."

  • Self-audit gap analysis
  • Evidence expectations by framework
  • Readiness dashboard
  • Remediation priority ranking
Tier: Starter → Pro
Time: 20-minute assessment
→ Free Self-Audit→ Readiness Assessment→ Pre-Audit Guide

This path is intentionally low-pressure. Its purpose is to help you make the right recommendation, not rush a purchase.

🟢 Developer Path

Enforce Governance Where It Counts

Where do you want control?

Code, prompts, and model calls

CI/CD and deployment

Runtime behavior

Evidence and reporting

1. Code & Prompt Safety

Goal:

Prevent risky AI logic from entering the codebase.

  • 24 deterministic security rules
  • Prompt injection pattern detection
  • PII and API key detection
  • 100% local validation (llmverify npm)
npm install llmverify
Tier: Starter
Setup: 5 minutes
→ Getting Started Guide→ API Reference→ Live Demo

2. CI/CD Enforcement

Goal:

Fail builds when AI governance rules break.

  • GitHub App for automated PR scanning
  • Policy-as-code configuration
  • Pipeline templates (GitHub Actions, GitLab)
  • SBOM generation (CycloneDX, SPDX)
# See CI/CD templates
Tier: Pro
Setup: 15 minutes
→ Install GitHub App→ CI/CD Setup Guide→ GitHub Actions Example

3. Runtime Control

Goal:

Detect and intervene when AI behaves unexpectedly.

  • Kill Switch SDK (5-layer shutdown)
  • Real-time anomaly detection
  • OpenTelemetry integration
  • Human-override hooks
npm install @haiec/kill-switch-sdk
Tier: Business
Setup: 30 minutes
→ Kill Switch SDK→ Runtime Controls→ OpenTelemetry Guide

4. Audit-Ready Evidence

Goal:

Generate proof without manual reporting.

  • Cryptographically signed Trust Artifacts
  • ISAF Logger (EU AI Act Article 12)
  • Compliance badges (47 variants)
  • Automated reporting on every deploy
pip install isaf-logger
Tier: Pro → Business
Setup: 10 minutes
→ Trust Artifacts→ ISAF Framework→ Badge Generator

Still Unsure?

If you're unsure which path applies, that uncertainty itself is a governance risk.

Talk to an expert — 15 minutes, no pitch

We'll help you understand:

Which regulations apply to you
Your current compliance gaps
Fastest path to audit-readiness
Budget requirements (realistic)
Schedule Clarity Call

Or start with the free tools:

Run AI Risk Scan (30 seconds) →Law Finder (2 minutes) →Self-Audit (15 minutes) →