# PEAC compliance mappings

Artifact-centric, non-claiming mappings between PEAC surfaces and common compliance and regulatory frameworks. Every mapping lists PEAC surfaces that can be used as supporting evidence toward specific framework requirements; no mapping claims conformity, certification, or end-to-end coverage.

## Standards and regulatory mappings

- [ISO/IEC 42001:2023 Clause 8 mapping](ISO-42001-MAPPING.md) - operational planning and control objectives, with cross-references to Clauses 6.1, 7.5, 9, 10, and Annex A.
- [EU AI Act Annex IV mapping](EU-AI-ACT-ANNEX-IV-MAPPING.md) - technical-documentation points §1(a) through §5. Applicability context: Regulation (EU) 2024/1689 entered into force on 1 August 2024 and applies from 2 August 2026, with exceptions under Article 113.

## Additional compliance guides

These pre-existing guides describe how PEAC records can help evidence specific regulatory frameworks. They pre-date the Clause-8 and Annex-IV mappings above and remain available as companions.

- [EU AI Act (articles view)](eu-ai-act.md) - traceability, transparency, and record-keeping articles.
- [GDPR](gdpr.md) - data protection and privacy.
- [SOC 2](soc2.md) - Trust Service Criteria audit support.

## Scope and non-claim

- PEAC does not certify any operator, provider, or deployer against any framework.
- PEAC does not implement an AI management system.
- PEAC does not perform risk assessment, risk treatment, impact assessment, or conformity assessment.
- PEAC does not substitute for operator-owned compliance processes.

Every mapping row on the standards-and-regulatory pages above cites a concrete PEAC artifact (spec, fixture, test, package, or generated artifact) and names explicitly what PEAC does not do for that row. Operators own the management-system activities; PEAC supplies the records and verification surfaces that management systems consume as evidence inputs.

## Related documents

- [Trust artifacts](../TRUST-ARTIFACTS.md)
- [SECURITY.md](../../SECURITY.md)
- [SLO](../SLO.md)
- [Stability contract](../STABILITY-CONTRACT.md)
- [Threat model](../THREAT_MODEL.md)
