About the atlas

Operator-grade reference for AI regulation and data privacy law, built and maintained by Voyverse.

Voyverse Atlas is a free reference tool published by Voyverse, an AI governance engineering firm working with regulated companies in the EU, the GCC, and the UK. We run ISO/IEC 42001 implementations, EU AI Act readiness assessments, and AI risk-management engagements full-time, and we built the atlas because we needed it ourselves.

Most public AI-regulation maps are designed for browsing. The atlas is designed for operators — people who have to actually comply with these regulations on Monday morning. Each regulation page tells you who's in scope, what evidence to keep, where this regulation overlaps with the others, and (where we have one) the Voyverse interpretation note: what we think the text actually means in practice when an auditor or a procurement reviewer or a lawsuit shows up.

Why this atlas, why now

The EU AI Act enforcement starts August 2026. The GCC privacy stack matured between 2021 and 2025 and now runs in parallel with national AI strategies that cite EU AI Act language directly. ISO/IEC 42001 has gone from a niche standard in 2023 to procurement table-stakes in 2026. Most companies we work with discover the regulatory landscape one obligation at a time — too late, and from sources that conflict with each other.

The atlas is the version of that landscape we wish we'd had on day one of every engagement.

Editorial choices

Depth over breadth

We cover EU + UK + GCC + international standards. We don't cover Africa, Latin America, or APAC outside our client geographies. The atlas is opinionated about scope — about 35 regulations curated rather than 80 catalogued.

One map for AI + privacy

AI governance is downstream of data governance. The EU AI Act doesn't make sense without GDPR; UAE AI work doesn't make sense without the ADGM and DIFC privacy stacks. We treat them as one map.

Primary sources only

Every regulation page links the official text — government, regulator, ISO, NIST, or the equivalent standards body. No commentary, no SEO content sites. If we cite a secondary source it's flagged as such.

Maintenance cadence

The atlas is reviewed quarterly against primary sources. Each regulation page shows a last_verified date in the sidebar. When a regulation changes — amendments, withdrawals, enforcement actions — we update both the structured fields and the Voyverse note, and bump the verified date.

Not legal advice

DisclaimerThe atlas is reference content, not legal advice. AI regulation is jurisdiction-specific, fact-specific, and evolving. If you're making a compliance decision for a real product, talk to qualified counsel in the relevant jurisdiction. Voyverse Inc. and the authors disclaim liability for decisions made on the basis of atlas content.

Voyverse

If you're an in-scope organisation and the atlas is leaving you with more questions than answers, that's usually the right time to talk to us. We run end-to-end ISO 42001 implementations, EU AI Act readiness work, and integrated assessments for the AI-plus-privacy overlap. voyverse.com has services, case studies, and a contact form.