AI Procurement & Governance Framework | AI Compas

What is AI Compas?

AI Compas is Dweve’s vendor-neutral AI procurement and governance framework for regulated organisations in the Netherlands and the EU. It covers use-case classification, proportional risk routes, supplier criteria, RFI/RFP, proof of concept, contract controls and monitoring. The public catalogue separates the neutral framework, derived procedure and criteria mapping from supplier-response material. It is a procurement method, not a certification or legal advice; confirm the legal position for each use case and deployment.

• The six knock-out gates cover EU data sovereignty, processing terms (GDPR Article 28), no model training on customer data, a security baseline, explainability and traceability, and exit and portability.
• The catalogue contains six framework records, ten procedure records and one criteria-mapping record. Supplier RFI/RFP answers are intentionally outside this neutral catalogue.

For consumers

AI Compas is a plain-language route for people in regulated organisations who need to buy or review AI. It starts with the use case, asks what could go wrong, and points to proportionate checks for suppliers, data, security, human review and exit. The public catalogue links the framework, the procedure and the criteria mapping, so a reader can move from an overview to the source record. It is a procurement method, not a certification or legal opinion.

For businesses

AI Compas is a vendor-neutral AI procurement and governance framework for regulated organisations in the Netherlands and the EU. It takes a buyer from use-case classification and risk routing through supplier criteria, RFI/RFP, proof of concept, contract controls and monitoring. The neutral catalogue separates method records from supplier-response material and keeps the legal position of each use case for the buyer to confirm.

For engineers

AI Compas gives a regulated AI purchase a traceable path: classify the use case, select a risk route, apply knock-out and award criteria, test supplier claims in an RFI/RFP or PoC, then carry evidence into contract controls and monitoring. The framework, procedure and criteria mapping are separate source records. The six knock-out gates and every exception remain subject to the applicable deployment, procurement and legal review.