EU AI Act requirements (Articles 9–15) are policy and process attestations that Admina cannot infer from runtime traffic alone — they require a human to declare which checks the organisation has actually completed (e.g. "risk management process documented", "data bias examination performed").
Until you submit an assessment, the dashboard renders all articles at 0% with a default
placeholder. To record your real coverage, send your declared evidence with a
POST request to /api/compliance/gap-analysis
on this host (the route accepts POST only: opening it in the browser answers
405 Method Not Allowed).
Example request:
curl -X POST /api/compliance/gap-analysis \
-H "X-API-Key: $ADMINA_API_KEY" -H "Content-Type: application/json" \
-d '{"risk_category": "high", "system_name": "Credit scoring",
"current_compliance": {
"risk_management": [true, true, false, true],
"data_governance": [true, false, true, true],
"technical_documentation": [false, false, true, false],
"record_keeping": [true, true, true, true],
"transparency": [true, false, false, false],
"human_oversight": [false, true, false, false],
"accuracy_robustness": [true, true, false, true]
}}'
Each list has 4 booleans, one per check defined for that article. Replace the placeholder values with your real evidence. After submitting, refresh the dashboard to see the article grid and Admina Score reflect your actual coverage.
Articles 9–15 apply to high-risk systems only. For a
limited- or minimal-risk system, record the category instead,
e.g. {"risk_category": "limited", "system_name": "Helpdesk bot"}:
the panel then shows the articles as not required and the EU AI Act gap coverage is left out
of the Admina Score. Adding "voluntary": true with
current_compliance keeps the checks as a voluntary self-assessment,
also left out of the score.
GET /api/compliance/gap-analysis/latest returns the assessment
recorded last (404 without one), to compare before sending it again. The proxy keeps the
assessments across restarts when ADMINA_EU_AI_ACT_ASSESSMENTS_PATH
names a file it can write; otherwise they are kept in memory only.