Community Book a Walkthrough
Every law. Every regulation. | @Human
Rooted in fundamental rights

Every law. Every regulation.

While AI delivers unprecedented reach and capacity to any user, @Human begins from the perspective that humanity's laws and regulations must be foundational when seeking any outcome or goal.

If a law or regulation applies to what you are building, @Human gives you a place to express it, assess against it and enforce it.

Book a governance walkthroughSee the Risk Registry
↑ Built from the foundation up
The rule of law comes first. Capability comes second.

That is not a feature we bolted on. It is the order in which an @Human project is built.

Capability comes second. The rule of law comes first. The principle is simple: every law, every regulation, expressed, assessed and enforced inside the same project as the application itself.

  1. What the law requiresBuilders state the legal and regulatory obligations that apply to the application.
  2. What could go wrongThey describe what could go wrong for the people it touches.
  3. How risks are controlledThey record how each of those risks is prevented or reduced.
  4. Then, capabilityOnly then does the application reach a single end-user.

AI is young, and it must be taught

Artificial intelligence is extraordinarily capable and extraordinarily new. Everything it knows about our boundaries, it learns from what we show it and from the systems we place around it.

○
No childhoodIt never grew up learning what is and isn't acceptable.
○
No communityIt has no neighbours, colleagues or elders to answer to.
○
No inherited sense of our limitsIt knows only the boundaries we deliberately give it.

A newcomer of this power needs to be introduced to our rules deliberately, clearly and early.

The historian Yuval Noah Harari has gone as far as to suggest that AI could be understood as a kind of alien invasion: an intelligence that did not grow up among us, arriving faster than our institutions can adapt.
Humanity's answer has always been law.Laws and regulations are the accumulated record of what societies have learned, often painfully, about fairness, safety, privacy and dignity. How we present the rule of law to AI is not a compliance detail. It is essential and, arguably, existential.

Rooted in fundamental rights. Compulsory in every project.

One assessment is never optional. A Fundamental Rights Impact Assessment (FRIA) is compulsory in every @Human project's Risk Registry. Whatever else a project does, it must first consider how it could affect people's fundamental rights. This is the built-in framework every project starts from.

41fundamental rights, each with its legal reference
7chapters, from Dignity to Data & Privacy
16vulnerable groups named in assessments
11kinds of impacted party
Dignity5
Human DignityArt. 1
Right to LifeArt. 2
Integrity of the PersonArt. 3
Prohibition of Torture & Inhuman TreatmentArt. 4
Prohibition of Slavery & Forced LabourArt. 5
Freedoms10
Right to Liberty & SecurityArt. 6
Respect for Private & Family LifeArt. 7
Freedom of Thought, Conscience & ReligionArt. 10
Freedom of Expression & InformationArt. 11
Freedom of Assembly & AssociationArt. 12
Right to EducationArt. 14
Freedom to Choose an OccupationArt. 15
Freedom to Conduct a BusinessArt. 16
Right to PropertyArt. 17
Right to AsylumArt. 18
Equality7
Equality Before the LawArt. 20
Non-DiscriminationArt. 21
Cultural, Religious & Linguistic DiversityArt. 22
Equality between Women and MenArt. 23
Rights of the ChildArt. 24
Rights of the ElderlyArt. 25
Integration of Persons with DisabilitiesArt. 26
Solidarity7
Workers' Rights & Right to InformationArt. 27
Collective Bargaining & ActionArt. 28
Fair & Just Working ConditionsArt. 31
Social Security & Social AssistanceArt. 34
Right to HealthcareArt. 35
Environmental ProtectionArt. 37
Consumer ProtectionArt. 38
Citizens' Rights4
Right to Vote & Stand for ElectionArt. 39–40
Right to Good AdministrationArt. 41
Access to Documents & TransparencyArt. 42
Petition & Access to the OmbudsmanArt. 43–44
Justice4
Effective Remedy & Fair TrialArt. 47
Presumption of Innocence & Right of DefenceArt. 48
Legality & Proportionality of PenaltiesArt. 49
Right Not to Be Tried TwiceArt. 50
Data & Privacy4
Protection of Personal DataCharter Art. 8 · GDPR
Not Subject to Automated DecisionsGDPR Art. 22 · AI Act
Right to ExplanationGDPR · AI Act Art. 86
Access, Rectification & ErasureGDPR Art. 15–17

Who could be affected

Job seekersEmployeesCustomersCitizensPatientsStudentsTenantsSuspectsSocietyBystandersOther businesses

Who needs particular care

Children & MinorsOlder AdultsPersons with DisabilitiesEthnic & Racial MinoritiesReligious MinoritiesWomen & Gender MinoritiesLGBTQIA+ PersonsMigrants & Asylum SeekersLow-IncomeNeurodivergent PersonsLanguage MinoritiesMental Health ConditionsUnhoused PersonsDigitally ExcludedPersons in DetentionVictims of Domestic Violence

Drawn from the EU Charter of Fundamental Rights, the ECHR, GDPR and the EU AI Act, as built into @Human. Each scenario also records the triggers and vectors of harm, and the benefits at stake.

The Risk Registry: where law becomes structure

Every @Human project has a Risk Registry, designed to hold an unlimited number of regulatory frameworks and risk scenarios. @Human doesn't guess in advance which laws you will face. It lets you add the frameworks that actually apply to you.

Risk frameworks

The standards a project is assessed against. @Human provides built-in frameworks, and teams create their own custom frameworks whenever their context calls for it.

National lawSector regulationIndustry code of practicePublic-sector mandateInternal policy

Risk scenarios

In plain language, what an application could do to people: the harms that could follow, who would be affected, and the controls that prevent or reduce them. Each scenario is assessed against every framework the project carries.

Harms and benefitsWho is affectedRights at stakeControls
A real @Human Risk Registry: the compulsory fundamental rights framework, a custom Bangladesh environmental and biodiversity law framework, and a scenario assessed against both
A real Risk Registry. A biodiversity project carries the compulsory fundamental-rights framework and a custom framework for Bangladesh environmental and biodiversity law, side by side.

Frameworks are data, not code. There is no ceiling.

✚
A hospital systemCarries health-data and employment obligations.
⚖
A recruitment platformCarries anti-discrimination and AI-specific rules.
◍
A cross-border deploymentCarries the requirements of every jurisdiction it operates in, side by side.
In practice

Adding a framework for a new regulation

A recruitment platform uses AI to help match candidates and employers. Under the EU AI Act, AI used in hiring is classed as high-risk. Here is how the team brings that reality into @Human.

  1. Start with fundamental rightsThe compulsory FRIA sets out how automated matching could affect equal treatment, privacy and access to work.
  2. Add the frameworks that applySelect the relevant built-in frameworks and create a custom one, such as a Fair Recruitment framework for transparency, human review and non-discrimination.
  3. Write the scenariosA qualified candidate filtered out unfairly. A decision made without a human in the loop. Personal data used beyond its stated purpose.
  4. Assess and controlEvery scenario is assessed against every framework, and the controls that address it are recorded alongside it.
  5. Carry it forwardWhen the law changes or the platform enters a new market, add or update a framework. Scenarios are reassessed; nothing is rebuilt.

The same pattern works for any law, in any sector, in any country.

Animation of the recruitment example: fundamental rights first, then frameworks including a custom Fair Recruitment framework, three risk scenarios, a scenario-by-framework assessment with controls, and a new jurisdiction's framework added and reassessed without rebuilding

From registry to running system

A risk assessment that sits in a folder protects no one. In @Human, the Risk Registry is one part of a governed project, and the obligations it records are carried through to the application people actually use.

Together these turn legal obligations into working constraints. The law is not only documented in @Human; it is designed in, checked before release and watched in operation.

Animation: runtime enforcement blocks an AI reply that would make an unauthorised refund promise, and a monitoring rule raises an alert
Runtime enforcement in action: an AI reply the project has ruled out is blocked before anyone sees it.

Your software, your obligations, your control

Planet Crust is a software provider, not a SaaS provider. @Human is software that organisations deploy and run themselves, which means the frameworks in your Risk Registry reflect your obligations, in your jurisdictions, under your control.

The core code behind @Human is deployed by Cisco, KBR, Nemak and many others across a multitude of industries. Each operates under its own mix of laws and regulations.

CiscoKBRNemak

Teach AI well

The first lessons we give any new intelligence will shape everything that follows. @Human makes sure the first lesson is the most important one: that every outcome and every goal is pursued within the laws and regulations humanity has chosen for itself.

Whatever you are building and wherever the law requires care, bring it into the Risk Registry and build from there.

Every law. Every regulation.
Built in from the start.

Book a governance walkthroughTalk to sales