Frequently asked questions

Heldr shows Dutch and European businesses which AI tools are used in the company, which rules apply today, what moved to 2027 and 2028, and what to fix first. In plain language.

SMEs and mid-sized companies, and the people who answer for compliance there: IT and security leads, CEOs and owners, board members, and DPO or legal.

No. Heldr is not a certification body. We give you a verified, up to date picture of where you stand and the evidence to back it up.

The EU AI Act, ISO 27001, ISO/IEC 42001, NIS2 (the Dutch Cyberbeveiligingswet) and GDPR. CSRD, SOC 2 and DORA are outside our scope.

In 10 days you get a named inventory of every AI tool in your company, a verdict per framework and a ranked action list. At a fixed price agreed upfront.

No. We read app connections, sign-in data and usage metadata. Never content. Access is read-only.

No. Results are reported per team or department, not per person.

Heldr is hosted in the EU.

You choose. Turn it into continuous monitoring, or stop and keep the inventory, the report and the action list. No lock-in.

Within one business day.

If your company uses AI tools, parts of the AI Act already apply to you, such as AI literacy for staff. Other obligations moved to 2027 and 2028. Which ones depend on how you use AI.

AI tools employees use without the company knowing or approving them. Think of chatbots, browser plugins and AI features inside existing software. You cannot govern what you cannot see.

No recognised EU AI quality mark exists today. Be careful with providers that suggest otherwise.

The AI Act sets fines in article 99. The bigger costs are often lost tenders and customer trust.

That depends on your sector and size, and on whether you supply companies that fall under it. The free scan gives you a first answer.

When AI tools process personal data, GDPR applies. You need to know which data goes where and which access AI tools have to your systems.

Yes. Through RVO, SMEs can get 50% of eligible costs, up to €1,250, for concrete cyber resilience measures. Applications close 30 November 2026.

A short guided scan of your AI use, data access, NIS2 scope and GDPR position. You get an exposure score and a summary, and we follow up within 24 hours.

Yes. We train staff, boards and process owners, and we can provide interim capacity such as an AI compliance officer or NIS2 implementation lead.

The Heldr platform opens on 1 January 2027. The pilot is available now.