Thorian

Automated AI governance infrastructure and EU AI Act readiness assessment platform: continuous regulation monitoring, obligation mapping across 113 articles, and sub-second edge delivery.

view the live build

client: Thorian
service: AI Governance Platform & Compliance Landing Engine
sector: AI Governance / RegTech / EU Compliance
year: 2026

the brief

The EU AI Act does not pause for a product launch. Automated risk classification, code-level regulation monitoring, and obligation mapping under the Act mean that a compliance position valid last quarter may be wrong this week. Thorian was built to treat that churn as an engineering problem with a CI/CD-shaped answer rather than an advisory engagement that ends when the report is delivered.

built with

Astro · Cloudflare Workers · Tailwind CSS · TypeScript

what changed

Continuous CI/CD regulation monitoring transforms static compliance into automated engineering infrastructure

Instead of a quarterly advisory report, Thorian maps a client's code and systems against all 113 articles of the EU AI Act on every change. The platform classifies risk under Annex III high-risk categories, tracks GPAI provider obligations, and surfaces gap analysis the way a build pipeline surfaces test failures: immediately, with a diff, not after a billing cycle.

Annexes I–IV obligations are tracked as first-class, machine-readable data, so when the regulation amends a single article, the affected mappings re-classify automatically and the affected teams are told. Static compliance documentation rots silently; this one cannot.

inside the build

the compliance deadline trap

EU AI Act enforcement is phased, and the penalty structure scales with company revenue rather than project budget. A high-risk system that ships without the required documentation and conformity assessment does not get a fine; it gets a percentage of global turnover.

Most organisations approach this with a consulting engagement: a nine-week discovery, a 200-page report, and a binder that is already stale by the time the next amendment publishes. The report answers the regulation as it read on day one, and nobody is paid to keep it correct.

obligations mapped to the system

Thorian maps each system’s capabilities and data flows to the EU AI Act’s article-level obligations. Annex III indicators use the system’s documented architecture; a change in intended purpose triggers a new classification. The gap analysis runs with engineering tests on each commit.

instant edge delivery for enterprise risk buyers

Legal and risk teams review obligations; engineering leaders inspect how the system handles data. The demo renders in 0.52 seconds on throttled mobile 4G with zero client JavaScript.

delivery from the EU edge

Cloudflare’s European edge serves the site, assessment data, obligation mappings, and penalty references to EU buyers. Fonts and widgets are self-hosted.

the numbers

Metric	Legacy Compliance Consultancy	Thorian Edge Platform
Assessment turnaround	90 days	30 days
Audit staleness	Instant	Continuous
Mobile LCP (throttled 4G)	3.6s	0.52s
Initial client JavaScript	620 KB	0 KB
Lighthouse mobile score	41 / 100	100 / 100

in the details

02 views

Thorian automated continuous compliance workflow: connect, analyze, monitor, update

Thorian assessment deliverables, enterprise buyer profiles, and pricing tiers

the result

For enterprise buyers, the platform doubles as durable audit readiness: every obligation mapping, every penalty-structure reference, and every enforcement-timeline milestone is versioned with the regulation it cites, so auditors see a continuous trail instead of a point-in-time PDF that was stale the day it printed.

The delivery layer is built for the same buyers' procurement realities: sub-second page loads keep compliance funnels from leaking between the legal team and the engineering team, and sovereign EU edge hosting keeps assessment data inside EU jurisdiction with zero third-party leakage. Compliance software that cannot pass its own data-residency review does not convert.

credits

Two Shells

Systems Engineering

building something similar?

talk to 2sh