Know where each AI system stands under the EU AI Act and GDPR.

Oblioria helps US companies that build or use AI see where they stand under the EU AI Act and the GDPR. Your team answers a structured online questionnaire about each AI system. Your report then sets out, from your answers and after expert review, your likely role, the risk category and the obligations that apply, with their dates.

We're opening Oblioria to a first group of companies. Book a call to join it.

  • Only your team and your assigned consultant can read your answers.
  • We work in English and Spanish.
Sample
  1. 01Each AI system

    • Support chatbot
    • Candidate screening
    • Credit pre-check
    • Meeting notes
    • Fraud detection
    • Churn model
  2. 02Your team answers

    Candidate screeningPart 2 of 6

    Why we ask this

    Who built the system, how you use it and whether it reaches the EU decide which obligations apply.

    How did you get this system?

    • Selected: A third party built it, and we use or resell it as it is
    • We built it ourselves, or had it built for us
    • 4 more options
  3. 03Your consultant reviews

    Your consultantReviewing your answers

    Follow-up 1 of 2

    Who at your company checks a ranking before a candidate is rejected?

    ReasonYour answer shows how people oversee the tool's output.

    Answered by your team

  4. 04Your report

    Candidate screeningReleased

    Your role
    Deployer
    Risk level
    High-riskAnnex III use
    Obligations
    6 apply, each with its date
    Gaps to close
    3 (2 High, 1 Medium)

    Reviewed by your consultant

Each line is one AI systemCandidate screening, followed from answers to reportSample data for a fictional company.

Security comes first

  • Only your team and your assigned consultant can read your answers.
  • Each company's data is kept apart, and sensitive fields are encrypted.
  • Every staff account signs in with two-⁠step verification.
How we protect your data

Three steps from questions to a reviewed report

See the full process
  1. Answer

    Your team answers questions about one AI system at a time. Almost every question is multiple choice. You only see the questions that apply to you, and each screen explains why we ask. Where a question asks for a supporting document, you upload it securely.

  2. Review

    A consultant assigned to your company reviews what you submitted. If something is unclear, they ask a focused follow-⁠up question in the platform, tied to the exact answer it is about.

  3. Report

    Your consultant releases a report for that AI system. It sets out, from your answers and after expert review, your likely role, the risk category and the obligations that apply, with their dates.

People check the work, and you can follow every step

A consultant reviews every assessment

Before you see a result, a consultant assigned to your company reviews your answers, decides on each point our checks raise and asks follow-⁠up questions where needed. Your consultant reviews every report before it is released, and the report names the consultant who reviewed it.

A process you can see

Every question explains why it is asked. Your workspace shows where each assessment stands, who is working on it and its full history. The report also says what the review did not cover.

Plain English

Every finding is in plain English, with the legal reference next to it.

English and Spanish

Talk to us in English or Spanish. The questionnaire and reports are in English.

One workspace for your whole team

EU AI Act and GDPR questions cut across product, engineering, legal and privacy. Your company gets one private workspace where each of them answers the part they know.

  • Invite colleagues

    Your administrators invite people by email, as administrators or participants. Invitations expire if nobody accepts them. There is no open sign-up.

  • Work together without clashes

    One person edits an assessment at a time, so answers never overwrite each other. Work saves as you go, and earlier answers are kept.

  • Clear responsibility

    Each assessment has one person responsible for it, and your administrators can hand it to someone else.

  • See what needs you

    Your dashboard shows where each assessment stands. Notifications arrive live in the app, and our emails about assessments name no company, AI system or person.

Follow-up from your consultantSample

The Oblioria assessment screen for a fictional sales call summarizer: a clarification request from the consultant with two questions, one answered and one not answered yet, and the thread of questions and replies below it.

Follow-up from your consultantSample

A follow-⁠up thread with the consultant on a phone: the consultant asks a team member to check two answers, the team member replies, and the consultant follows up.
A real Oblioria screen with sample data for a fictional company.

For larger companies

  • One assessment and one report per AI system, so you can cover as many systems as you need, and one consultant assigned to your company for all of them.
  • An AI inventory: a lasting list of your company's AI systems.
  • Ask for another assessment or another service from your workspace.
  • Two-step sign-in for your team, a named main contact, and a full history of who did what.
  • On request, we export or delete your company's data.

What does the report tell you?

Your report covers one AI system. It sets out, from your answers and after expert review, your likely role, the risk category and the obligations that apply, with their dates. Your consultant reviews every report before it is released, and you read it in your workspace next to the answers it is based on.

Results reportSample

The Oblioria results report for an AI system: a plain-English conclusion, a High-risk Annex I Section B label, one Medium finding and one recommendation, the next action, and a scope panel with the role Provider and a result reference.

Results reportSample

The Oblioria results report on a phone, for a fictional track obstacle detector: result released, the conclusion, a High-risk Annex I Section B label, one Medium finding and one recommendation, the scope and the next action.
A real Oblioria screen with sample data for a fictional company.

The results report

Plain English first, with the legal reference next to each finding.

  1. The conclusion in a few plain sentences, then the reasons behind it.
  2. The risk category, from a prohibited practice to outside the EU AI Act.
  3. Findings by priority. Each says what was found, why it matters, what to do, how urgent it is and the legal reference.
  4. The next action your consultant recommends.
  5. Your role: provider, deployer, both, importer or distributor, or none if the Act does not apply.
  6. A reference number and the name of the consultant who reviewed and released it.

Every report also covers

  • Whether the system counts as a general-⁠purpose AI model.
  • Dates: where the law sets one, the item shows it with its legal basis.
  • What you told us is already in place.
  • What this review did not cover.

Oblioria is a compliance technology platform operated by Lexara Advisory LLC. Our expert-⁠reviewed reports identify potential regulatory obligations, compliance gaps and recommended corrective actions based on the information provided. These assessments do not constitute formal legal opinions or certifications of compliance. Oblioria is not a law firm. Tailored legal advice and remediation services are available through a separate professional engagement with qualified legal professionals and AI governance consultants.

QuestionnaireSample

The Oblioria questionnaire: a six-part progress rail, the screen Your role with AI systems with its Why we ask this note, the question How does your company relate to AI systems with multiple-choice options, and a panel showing part 1 of 6.

QuestionnaireSample

The Oblioria questionnaire on a phone: the screen Your role with AI systems, the Why we ask this note, and the question How does your company relate to AI systems with its options.
A real Oblioria screen with sample data for a fictional company.

The questionnaire

Six parts, one AI system at a time. Progress saves as you go, and answers are kept as revisions.

  1. Six parts, so you always know where you are.
  2. Why we ask this, on every screen.
  3. Multiple-choice answers that branch, so you only see what applies.
  4. Your progress in the current part.

From assessment to resolution

Built in Europe, around European law, for US companies.

  1. 01 · Assessment

    An expert-⁠reviewed report

    A consultant reviews every assessment. Your report sets out your obligations, the compliance gaps, the deadlines that apply and the corrective actions to take first, by priority.

  2. 02 · Resolution

    Help to close the gaps

    Through a separate engagement, agreed in writing, our AI-⁠governance consultants help you put the fixes in place, with an appropriately qualified lawyer where legal advice is needed.

  3. We don't just identify compliance gaps. We help you close them.

    Book a call (opens in a new tab)

Which laws do we cover?

Each finding in your report gives its legal reference.

EU AI Act

The main areas we check.

  • AI system and scopeArts. 2, 3
  • Prohibited practicesArt. 5
  • High-risk usesAnnex III
  • The Annex III exceptionArt. 6(3)
  • Regulated productsAnnex I
  • TransparencyArt. 50
  • Provider dutiesArt. 16
  • Deployer dutiesArt. 26
  • Fundamental rights impact assessmentArt. 27
  • Role shiftsArt. 25
  • General-purpose AI models, if you provide oneArts. 53-55
  • AI literacyArt. 4

Our questionnaire follows the AI Act as amended by the Digital Omnibus on AI (Regulation (EU) 2026/1744).

Your role, per system

  • Provider
  • Deployer
  • Importer
  • Distributor
Read more about the EU AI Act

GDPR

The data protection questions that come with an AI system.

  • Legal basis and special categories of dataArts. 6, 9
  • Automated decisions about peopleArt. 22
  • Impact assessments and recordsArts. 35, 30
  • Data protection officerArt. 37
  • Processors and their contractsArt. 28
  • Transfers outside the EUCh. V
Read more about the GDPR

Independent bias audits through AUDITLL144 and specialized AI-⁠governance consultancy for employers and employment agencies using automated employment decision tools (AEDTs) in hiring and promotion in New York City.

Explore our LL144 services

Questions before you book a call

What does it cost?

We price each engagement for your company, by how many AI systems you have and what they do. We talk it through on a free call and agree the price in writing before any work starts.

What does our team need to do?

Answer a guided questionnaire about each AI system, in the app and at your own pace. Several people can work on it, and one person on your team is responsible for each assessment. If something is unclear, your consultant sends a few follow-⁠up questions.

Who reviews our answers?

A consultant from Oblioria, assigned to your company. Your consultant reviews your answers, decides on each point our checks raise and reviews your report before it is released.

What happens on the first call?

The call is free, in English or Spanish. Tell us which AI systems you build or use and where your customers or users are. We explain how Oblioria works, answer your questions and tell you whether an assessment makes sense for you.

Is the report legal advice?

No. Your report is not a formal legal opinion or a certification of compliance, and Oblioria is not a law firm. Help to close the gaps is available through a separate engagement, agreed in writing, with an appropriately qualified lawyer where legal advice is needed.

Does the EU AI Act apply to a US company?

It can. The EU AI Act can apply when you place an AI system on the EU market, or when your system's output is used in the EU, even if your company has no office there.

Read the full answer
Who can see our answers?

Only your team and your assigned consultant. Our operations staff never see them, and every Oblioria staff account uses two-step sign-in.

Security and data protection

Find out where your AI systems stand.

We're opening Oblioria to a first group of companies. Book a call to join it, or write to us. We reply within one business day.

Phone
+1 (646) 381-2032
Email
hello@oblioria.com
Languages
English and Spanish