Articles
Guides to the AI Act and shadow AI
Practical guides written for Norwegian organisations. Each article answers one question, with dates and links to official sources.
The AI Act: status and deadlines
What applies when, and how far Norway has got.
- Does the EU AI Act apply in Norway?The AI Act is not yet in force in Norway. Status as of August 2026, who is covered anyway, and what the Digital Omnibus changed.
- AI Act timeline: what changed and whenEvery AI Act date in order, including the June 2026 Digital Omnibus deferrals. Updated as the rules change.
Roles and risk classes
Which role your organisation has, and when a use is high-risk.
- Provider or deployer under the AI Act?Most Norwegian organisations are deployers, not providers — but one decision can change that. How to tell which role you have.
- What is high-risk AI under the AI Act?High risk is decided by what the AI is used for, not by which tool it is. The Annex III areas, the exceptions, and when the obligations actually start.
- Shadow AI and the EU AI ActUnderstand how undiscovered workplace AI can affect EU AI Act roles, inventories, AI literacy, transparency, and high-risk obligations.
Shadow AI
AI used at work without the organisation knowing.
- What is shadow AI? A practical guide for organisationsShadow AI is the use of AI tools at work without the organisation's knowledge or approved governance. Learn why it happens and how to manage it safely.
- Shadow AI in Norway: a governance guide for businessesA practical Norwegian context for discovering and governing employee AI use, with GDPR, security, workplace trust, and the EU AI Act in view.
- Discover shadow AI without reading contentA privacy-conscious shadow AI discovery method based on service visibility, account connections, employee dialogue, and a governed AI inventory.
Templates and getting started
Practical templates, where to find help, and who we are.
- AI policy template for Norwegian organisationsA short AI policy you can adapt, with the clauses that matter under the AI Act and the Personal Data Act, and guidance on what to leave out.
- AI inventory template: the fields that actually matterWhat to record about each AI use case so the inventory answers customer questionnaires and supports a risk classification, rather than listing tool names.
- Who helps with AI Act compliance in Norway?Public guidance, law firms, consultancies and software — what each is good for, and where the free public resources are.
- About KISYN: Nordic shadow AI discovery and governanceKISYN is a Norway-based beta product helping organisations discover workplace AI use and build a governed AI inventory without reading employee content.
Try the AI Act assessment
Answer plain-language questions and see which risk class the use falls into.
Try the AI Act assessment