# GoToCertify Compliance Self-Assessment Hub

> Free, browser-only self-assessment tools for EU regulations (EU AI Act, GDPR, NIS2, DORA), each mapped to the relevant ISO management-system standard (ISO/IEC 42001, 27701, 27001, 22301). No account, no data stored: results and a PDF report are generated in the user's browser. Published by GoToCertify (https://www.gotocertify.com), a provider of professional certification exams, training and compliance consulting.

Each assessment scores requirements on a 0-4 maturity scale, computes compliance percentages by area, by legal source and by ISO control group, derives P1/P2/P3 priorities and produces a prioritised action plan with guidance, a control coverage map usable as a Statement of Applicability basis, regulatory deadlines and a roadmap. Interface in English, Italian, German, French and Spanish; content in English (Italian for the Italy edition).

## Assessments
- [EU AI Act](https://assessment.gotocertify.com/aiact-eu/): Regulation (EU) 2024/1689 as amended by the Digital Omnibus – mapped to ISO/IEC 42001:2023 — 58 requirements, 12 areas, regulatory snapshot 2026-10-31, version 1.0.
- [GDPR](https://assessment.gotocertify.com/gdpr/): Regulation (EU) 2016/679 with EDPB guidance – mapped to ISO/IEC 27701:2025 — 70 requirements, 14 areas, regulatory snapshot 2026-10-31, version 1.0.
- [NIS2 Directive](https://assessment.gotocertify.com/nis2/): Directive (EU) 2022/2555 and Implementing Regulation (EU) 2024/2690 - mapped to ISO/IEC 27001:2022 — 69 requirements, 14 areas, regulatory snapshot 2026-10-31, version 1.0.
- [DORA](https://assessment.gotocertify.com/dora/): Regulation (EU) 2022/2554 on digital operational resilience for the financial sector – mapped to ISO/IEC 27001:2022 and ISO 22301:2019 — 70 requirements, 13 areas, regulatory snapshot 2026-10-31, version 1.0.
- [AI Act – Italia](https://assessment.gotocertify.com/aiact-it/): AI Act, L. 132/2025, D.Lgs. 160/2026 e 179/2026 – mappato su ISO/IEC 42001:2023 (contenuti in italiano) — 71 requirements, 15 areas, regulatory snapshot 2026-10-31, version 1.4.

## Methodology
- Maturity scale: 0 not started, 1 initial, 2 partial, 3 largely compliant, 4 fully compliant.
- Compliance % = score obtained / maximum obtainable over applicable requirements.
- Priority P1 = high criticality and level <= 2; P2 = high criticality with level 3, or any level <= 1; P3 = other gaps.
- Sources: official texts only (EUR-Lex, European authorities, national official journals, ISO). Proposals not yet adopted are labelled as such.

## Contact
- Website: https://www.gotocertify.com
- Email: exam@gotocertify.com