The customer wants proof
A customer or tender asks about AI and security. Who has the answer?
AI governanceFor people who just want to do their work.
Visibility on AI. Without the chaos.
Platform preview
Live
Status per framework
EU AI ActBreach62
NIS248
GDPRBreach71
ISO 4200135
- - - Top quartile, similar companies
Readiness 50%
Example data
heldr.is for you if one of these sounds familiar.
AI out of sight
Your team uses AI tools. But which ones hold company data, and who keeps track?
Which rules apply?
NIS2, the Cyberbeveiligingswet. You hear the names, but what do they mean for your company?
Not for you if you already have a compliance department. You are probably fine.
A platform that watches. People who do the work.
THE PLATFORM
- Every AI tool in your company, named and classified
- A verdict per law: AI Act, NIS2, GDPR
- An alert when your company or the law changes
THE PEOPLE
- We draft and update your policies, registers and DPIAs. You approve them
- We set clear roles: who owns what, and who acts when something goes wrong
- We train your teams and board (AI literacy is required by law)
- We answer the customer questionnaire with you
Why not just hire someone or buy a tool?
| Option | What you get | What goes wrong |
|---|---|---|
| Consultant | A report | Outdated by next quarter. Next law, next invoice. |
| Compliance officer in house | A person | Too expensive for most SMBs, and the knowledge leaves with them. |
| Compliance software | A tool | Someone still has to fill it, read it and act on it. |
| heldr. | Platform and people | Always up to date. We do the heavy lifting, you stay in charge and know exactly who acts when something happens. Fixed monthly price. |
You can't outsource responsibility. The law asks you to own it. Heldr makes owning it doable.
Start with 10 days. Decide after.
- 01
Pilot
We connect read only and map every AI tool (10 days)
- 02
Verdict
What applies, what is missing, what to fix first
- 03
Continue
Heldr keeps watching and we handle the work, or you stop. No lock in.
The cost of not knowing
The expensive part is the tool nobody knew about.
1 in 5
Data breaches where shadow AI played a role. Average extra cost: $670,000.
IBM, 2025
63%
Breached organisations without an AI policy, or still writing one.
IBM, 2025
#1 in the EU
The Netherlands has the highest compliance burden of all member states, as a share of labour costs.
PwC, 2026
What applies to you today
- NIS2 · CyberbeveiligingswetLiveIn force since 15 August 2026. No transition period.
- AI Act · transparency obligationsLiveIn force since 2 August 2026.
- AI Act · high-risk obligationsDelayedTechnical standards pending. Phasing toward the end of 2027.
- GDPRLiveApplies in full to any AI system processing personal data.
Checked 27 October 2026, 09:15 CET · last changed 2 August 2026