166 AI regulations, 80 risks, 116 controls mapped and kept current.

Yes. Full access to all 166 regulations, 80 risk categories, and 116 controls is free, with no gated tiers on the core mapping. The Hub is designed as a shared reference layer for the AI Governance community with the foundational mapping every compliance and risk team needs, regardless of which Governance platform they use.

The Insight Hub is updated continuously by our AI Governance Experts. AI regulations evolve rapidly: new laws, amendments, and enforcement guidance appear across multiple jurisdictions every month. Credo AI's research team monitors regulatory bodies, standards organizations, and enforcement actions worldwide, refreshing mappings as changes occur so teams are never working from a stale compliance picture.

The most effective AI controls span five domains: AI Governance, human-AI interaction, operational processes, technical security, and transparency. The right mix depends on AI use case and risk profile, with a high-stakes application like credit scoring or healthcare diagnostics needing stronger transparency and human-oversight controls than a low-risk internal tool. 

‍

The Insight Hub catalogs 116 controls across these domains, each mapped to the risks it mitigates and the regulations it satisfies, so teams can prioritize by both risk reduction and regulatory leverage.

Organizations should be managing AI risks across ten primary categories: AI agency and autonomy, fairness and bias, privacy, security, harmful content generation, malicious use, information integrity, third-party and vendor risk, environmental impact, and societal harm. Which of these matters most depends on industry, AI use cases, and the jurisdictions where you operate.

‍

The Insight Hub catalogs 80 risk categories in total, each mapped to the regulations that require their mitigation and the controls that address them, so teams can prioritize by both severity and regulatory leverage.

‍

If you want to dive deeper into which risks you should be managing within your organization, contact our Advisory team for a full deepdive.

Crosswalking means mapping the requirements, risks, and controls from one framework to equivalent elements in another, so a single implemented control can be traced to every regulation it satisfies. 

‍

For example, a transparency control required under the EU AI Act often fulfills requirements in NIST AI RMF's MAP function and ISO 42001's risk treatment clause simultaneously. 

The Insight Hub maps all 166 regulations to a unified library of 80 risks and 116 controls, eliminating duplicate work and producing audit-ready coverage across multiple regimes at once.

The Insight Hub maps regulations by country, state, and economic bloc, so you can instantly see what's active, what's pending, and what's proposed in your jurisdiction. This includes federal, state-level, and sector-specific rules that often get missed in single-source trackers.

We currently track 166 AI regulations, frameworks, and standards across every major jurisdiction, including the EU AI Act, NIST AI RMF, ISO 42001, HITRUST AI, Colorado AI Act, and emerging laws in APAC and LATAM. The list is updated continuously as new regulations are passed or amended.

It depends on where you operate, your industry, and how you deploy AI — a US healthcare company faces different obligations than an EU financial services firm. The Insight Hub lets you filter all 166 mapped regulations by geography, sector, and AI use case so you can see exactly what applies to you.