We Handle AI Compliance So You Don't Have To.

Nora Comply is built for recruitment and HR teams using AI systems and/or systems with AI features.

Recruitment is explicitly named as high-risk under Annex III of the EU AI Act, because AI-assisted hiring decisions directly affect people's livelihoods.

If you're using an ATS with AI-powered screening, a candidate-ranking tool, or Microsoft Copilot in an HR context, you're considered a deployer under the Act — meaning Article 26 obligations apply to your organisation.

Most recruitment teams didn't choose to be in scope. They adopted tools to help teams work faster, but those same systems have gradually introduced AI capabilities that now carry legal obligations.

Nora Comply was built for compliance officers, IT leaders, and executives who need to demonstrate compliance clearly, continuously, and without relying on external legal advice every time something changes.

When you register an AI tool in Nora Comply, we first ask how the tool is actually being used. Risk classification under the EU AI Act depends on the use case, not simply the product name.

For example, Bullhorn used for internal reporting has different obligations than Bullhorn used to screen or rank job candidates.

Our classification engine maps each use case against Annex III of the EU AI Act and provides:

• A plain-English risk classification (High, Limited, or Minimal)
• The legal obligations triggered by that classification
• A clear action plan showing exactly what needs to be completed and in what order

No. Only a government supervisory authority can ultimately determine whether an organisation complies with the EU AI Act, and that assessment is made retrospectively.

Legal advisors explain what the legislation requires. Nora Comply focuses on the operational side of compliance by:

• Registering your AI systems
• Mapping applicable obligations
• Generating evidence records
• Keeping documentation current as vendors release new AI features
• Continuously updating your compliance position as regulations evolve

Built with legal reasoning at its core, Nora is designed to support the day-to-day operational requirements of EU AI Act compliance.

EU AI Act compliance is not a one-time exercise. Your obligations can change whenever:

• AI vendors release new functionality
• Regulations are updated
• Your organisation changes how AI systems are used

Nora continuously monitors these changes. When a vendor introduces an update that affects your risk profile, Nora automatically:

• Detects the change
• Explains in plain English what changed
• Identifies any new obligations
• Creates a timestamped record in your evidence trail

This removes the need to manually review vendor changelogs or periodically audit your AI estate.

Yes. AI governance rarely sits with a single person — responsibility often spans:

• Compliance teams
• IT
• Security
• Executive leadership
• Risk and governance functions

Nora is designed for collaborative compliance. Teams can:

• Assign ownership for individual AI systems
• Control user permissions and visibility
• Generate board-ready reports
• Produce regulator-ready evidence exports
• Support organisations with multiple brands, entities, or office locations through multi-entity and multi-site functionality