Compliance Packs

EvalDesk ships with HIPAA and EU AI Act compliance packs. Each maps regulatory controls to test-case categories.

HIPAA Security Rule

10 controls from 45 CFR §164.312 / §164.308 (access control, audit, integrity, authentication, transmission security, encryption, workforce security, contingency, minimum necessary, de-identification).

EU AI Act

5 high-risk articles: Art. 9 (risk management), Art. 10 (data governance), Art. 13 (transparency), Art. 14 (human oversight), Art. 15 (accuracy/robustness).

How it works

  • Tag test cases with the control's category (e.g. access_control)
  • Run the eval + review
  • The control-coverage matrix is embedded in the signed certificate

Check coverage: GET /api/v1/runs/:id/coverage?suite=hipaa