Question 1

What is a DPIA and how does Altara help?

Accepted Answer

A Data Protection Impact Assessment (DPIA) is required under GDPR Article 35 when processing is likely to result in a high risk to individuals. Altara's DPIA Insights module ingests your DPIA documents and emits structured insights: lawful basis per purpose, data categories, risks matrix, mitigations, residual position, and an Article 36 prior-consultation flag.

Question 2

What is a FRIA?

Accepted Answer

A Fundamental Rights Impact Assessment (FRIA) is required under EU AI Act Article 27 for deployers of high-risk AI systems before first use. Altara's FRIA workflow runs applicability, generates a NAVI report grounded in your upstream risk layers, then captures HITL Step 2 sign-off with impacted rights, mitigations, approver and signoff date.

Question 3

How does the 5-Layer Risk Assessment work?

Accepted Answer

Altara's risk model is sequential: (1) Classification → (2) Inherent Score → (3) Controls Maturity (with evidence upload) → (4) Monitoring → (5) Residual Risk. Each layer feeds the next so FRIA and Explainability assessments are anchored to real evidence.

Question 4

What does Vendor Due Diligence cover?

Accepted Answer

Altara's Vendor DD evaluates AI vendors across 10 areas including governance maturity, security and privacy controls, model transparency, human-oversight mechanisms, regulatory alignment, data handling practices and explainability. NAVI grades coverage and recommends mitigations — your team Accepts or Overrides.

Question 5

Where is Altara hosted?

Accepted Answer

Altara is delivered as a cloud-hosted platform with options for EU and US data residency. Self-hosted/on-prem deployments are available for regulated enterprises on request.

Question 6

How long does it take to onboard?

Accepted Answer

Most organisations register their first AI application within an hour and complete a full maturity assessment plus DPIA + risk + FRIA + vendor DD workflow for one application within a week. Full portfolio onboarding (10–50 applications) typically completes within 4–8 weeks with managed-service support.

Question 7

Can Altara integrate with my existing tools?

Accepted Answer

Yes. Altara exposes a REST API for AI inventory, assessments and audit-trail export. Webhook-driven telemetry ingestion (for DLP, SIEM, model gateways) is on the roadmap as part of the Dynamic AI Telemetry module.

Question 8

Which AI frameworks does Altara support?

Accepted Answer

Altara aligns to globally recognised frameworks: NIST AI Risk Management Framework (US), OECD AI Principles (Global), ISO/IEC 42001 AI Management Systems (International) and the EU AI Act + GDPR (European Union). The architecture is extensible — additional jurisdictions and frameworks can be added as regulations evolve.

Question 9

Is Altara only for EU AI Act compliance?

Accepted Answer

No. Altara is built for global AI governance. While we cover EU AI Act obligations (including Art. 6 risk classification, Art. 9 risk management, Art. 27 FRIA, Art. 13/86 transparency and Art. 12 record-keeping), we equally support NIST AI RMF (GOVERN · MAP · MEASURE · MANAGE), OECD principles and ISO/IEC 42001.

Question 10

Can Altara help me prepare for ISO/IEC 42001 certification?

Accepted Answer

Yes. Altara captures the artefacts, evidence and audit trail an auditor expects to see at certification — covering ISO/IEC 42001 sections §4 (context) through §10 (improvement), including §6.1.4 AI impact assessments.

Question 11

What is Altara Core?

Accepted Answer

Altara Core is an advanced AI Governance, Risk and Compliance platform that helps organisations operationalise responsible AI across the enterprise. It combines a centralised AI inventory, integrated risk and impact assessments, vendor due diligence, governance documentation reviews, and continuous risk monitoring — all powered by NAVI Intelligence, our custom-built compliance and governance agent.

Question 12

Who is Altara Core for?

Accepted Answer

Altara Core is designed for organisations of any size that build, deploy or procure AI systems — including banks, insurers, healthcare providers, telecom operators, public-sector bodies and manufacturers. Primary users include Chief AI Officers, Heads of AI Risk, Data Protection Officers, Model Risk Managers, Compliance Officers and AI Governance Committees.

Question 13

How does Altara differ from a generic GRC platform?

Accepted Answer

Generic GRC platforms were built before modern AI. Altara is purpose-built for AI governance: NAVI reads your model documentation, drafts findings with citations, and runs guided DPIA · FRIA · Vendor DD · Explainability workflows. Every AI assessment captures the human-in-the-loop decision in a regulator-defensible audit trail.

Question 14

Does Altara replace my legal or compliance team?

Accepted Answer

No. NAVI is designed to augment governance teams, not replace them. Human review and approval are embedded throughout every workflow — you Accept or Override every NAVI verdict and the rationale is captured in the audit trail.

Question 15

Do you offer managed services?

Accepted Answer

Yes. Altara combines the platform with expert-led managed services covering AI model registration, inventory management, risk and DPIA assessments, vendor due diligence, documentation reviews, risk classification and continuous risk monitoring. Our managed-service model lets you operationalise governance without building large internal AI governance teams from day one.

Question 16

How do I engage Altara for a pilot?

Accepted Answer

Email hello@altaracore.ai with your organisation, industry, AI portfolio size and target outcomes. Pilot engagements typically start with an AI Maturity Assessment and one or two AI applications registered end-to-end.

Question 17

What does the pricing model look like?

Accepted Answer

Altara is sold as an annual subscription scaled to the number of AI applications under governance, with optional managed-service add-ons. Pilot pricing is available for early-access partners. Contact hello@altaracore.ai for a quotation.

Question 18

What is NAVI Intelligence?

Accepted Answer

NAVI is Altara's intelligent governance agent, built on Claude Sonnet 4.5. NAVI reads and analyses model documentation, summarises technical AI documents in plain language, reviews policies, model cards, DPIAs and governance evidence, identifies gaps and risks, assists with risk classification and generates executive-ready overviews.

Question 19

Does NAVI make autonomous decisions?

Accepted Answer

No. NAVI proposes — humans decide. Every assessment surfaces an Accept or Override action with a documented reason. NAVI's verdict and the human decision are both captured in the audit trail.

Question 20

Where does NAVI's intelligence come from?

Accepted Answer

NAVI uses Anthropic's Claude Sonnet 4.5 large language model under the hood, configured with governance-specific prompts and citations. We integrate via the Emergent LLM key infrastructure.

Question 21

Will my documents be used to train AI models?

Accepted Answer

No. Documents you upload to Altara are processed for governance analysis only and are not used to train Claude or any other model. Data residency and processing terms are made explicit in our Data Processing Agreement.

Question 22

How is my data secured?

Accepted Answer

All data is encrypted in transit (TLS 1.2+) and at rest. Access is role-based with detailed audit logging. We follow ISO 27001-aligned security practices.

Question 23

Who has access to my AI documentation?

Accepted Answer

Only authorised users in your organisation. Altara staff access is restricted to support cases you raise and is logged.

Frequently Asked Questions