NADOVO Plattform
AI-generated It’s time. The NADOVO platform is here, in closed beta since April 2026.
Behind it is a simple conviction: AI compliance doesn’t belong in scattered files, but in a system that grows with you. Risk assessments in Excel, training records in folders, action plans half outdated three months later - that’s how compliance fails in most companies. Not out of negligence, but because it’s treated as a project you complete once.
But the EU AI Act isn’t a project. It’s a cycle. That’s exactly what we built the platform for: not just a framework on paper, but software in which compliance lives.
Why framework and platform belong together
Our co-founder Jochen Stier worked for twenty years in process consulting, with ITIL, COBIT and service management methods. Frameworks not as rule books to tick off, but as structure that makes complexity manageable.
Through that lens, the EU AI Act reads differently. Where many see 113 articles and a legal text, there’s a process: classify AI systems, derive measures, keep records, monitor. A cycle that needs a structure.
This structure is the NADOVO framework: five phases, DISCOVER, DEFINE, ASSESS, IMPLEMENT, MONITOR. But a methodology only works when it doesn’t gather dust in a filing cabinet, but runs in the daily work of teams that have other priorities. That’s why the platform exists.
How the platform is built
The backbone is the compliance journey: the same five phases, as a guided path instead of a loose methodology paper.
In DISCOVER you capture your AI systems, including the embedded and the unofficial ones. What this entry point looks like in practice is shown in our 4-week plan. In DEFINE you assign each system its use case, the result is the AI process, because the use determines the risk, not the tool. In ASSESS every process is classified. In IMPLEMENT measures and training are created. In MONITOR everything stays current. Each phase builds on the previous one, nothing gets lost.
Four building blocks make the difference:
Rule-based, not AI-powered. Risk classification runs on deterministic rules against Annex I and III of the EU AI Act, not on a language model. That means traceable results an auditor accepts, instead of a black box you have to question. Side effect: NADOVO is itself not an AI system and doesn’t fall under the AI Act.
An audit trail that holds. Every change to systems, processes, assessments and training is logged immutably, for ten years, as Article 12 requires. Nothing can be edited or deleted after the fact. At the push of a button it becomes an audit-ready report.
Hosted in Germany. The data sits on German servers, not in a US cloud. GDPR-compliant from the ground up.
Multi-tenant. Consultants, agencies and external data protection officers manage several clients through one interface. Compliance as a service, not just a solo effort.
On top comes the craftsmanship that makes the difference in everyday work: task management for measures, automatic versioning, ready-made PDF reports for documentation, and a dashboard that shows progress across all phases.
What the beta teaches
Since April 2026, the first companies have been testing NADOVO in a closed beta. Two insights have been confirmed, more clearly than expected.
First: the real problem lies before risk classification. Most companies simply don’t know which AI they use. Not out of negligence, but because AI has long been embedded in standard software that nobody has on their radar as an AI system. A CRM with lead scoring. A translation tool. A chatbot the marketing team built in months ago.
Second: compliance is teamwork. IT knows the systems, but not the legal bases. Management knows the liability, but not every tool. The data protection officer knows the GDPR, but the AI Act is a separate body of rules. The platform brings these perspectives together in a structured way, instead of leaving them in separate Excel files.
Why we aren’t lawyers, and why that’s good
NADOVO doesn’t come from the law firm, but from the process. Working through legal requirements is something others can do. What we bring is the experience of how to translate methodology into running processes that survive in everyday work.
That’s the gap between a framework that sounds good and a compliance a company can actually demonstrate. The platform closes exactly this gap: framework, consulting and software from a single source, tailored to mid-sized companies that have neither an enterprise budget nor their own compliance department.
One question to close. If an audit comes up next week: could you show at the push of a button which AI you use, in which risk class, with which measures? If that sounds more like an Excel search, the platform is worth a look. Best within an AI compliance consulting, where we show it to you on your own case. Where you stand today is clarified beforehand by our quick check.
How this idea became a platform is told in detail by our co-founder: Why I built NADOVO.
About the author
Jochen Stier is a co-founder of NADOVO with over 20 years of experience in process management and IT service management. He helps German SMEs implement the requirements of the EU AI Act systematically and pragmatically. His 5-phase NADOVO framework combines regulatory requirements with practical feasibility, without enterprise budgets or complex tools.
Further reading: