Senior Independent Practice · GRC · Fractional DPO · AI Governance
Master your regulatory obligations with a concrete, defensible framework.
Founded by Alain Rivelon, ARCompliance provides direct strategic counsel to executive boards, CIOs, and DPOs navigating DORA, NIS2, GDPR, and the EU AI Act.
Certified senior practice · Independent counsel
- Compliance & Data Privacy
You face a GDPR, DORA, or NIS2 obligation with no qualified lead.
DPO vacancy, upcoming regulatory inspection, or compliance mandate without a formal action plan. Time is critical.
Fractional DPO & GDPR - Operational Resilience
Your critical ICT assets are unclassified and third parties unqualified.
DORA Pillar 1, NIS2, and ISO 27001 require formal asset mapping and executive-level risk governance.
GRC Resilience & ICT - AI Governance & EU AI Act
Your teams use generative AI without governance policy or impact assessments.
The EU AI Act and GDPR impose specific obligations on risk classification and human oversight.
AI Governance & EU AI Act
Practice Areas
Three actionable practices for executive decision-makers.
Fractional DPO & GDPR Compliance
DPO mandate management, ROPA register, data flow mapping, DPIA/EBIOS RM impact assessments, and CNIL liaison.
View DPO practice- Documented ROPA register
- Structured DPIA files
- DPA/SCCs contractual pack
GRC & ICT Resilience (DORA / NIS2)
Critical ICT asset classification under DORA Pillar 1, third-party TPRM mapping, KPI/KRI governance committees, and ServiceNow IRM.
View GRC practice- ICT classification matrix
- Prioritised remediation plan
- Executive arbitration briefs
AI Governance & EU AI Act
Risk-level classification, AI impact assessments (DPIA/PIA), AI Act × GDPR reconciliation, and human oversight frameworks.
View AI Governance practice- AI systems register
- AI impact assessment files
- AI usage charter
Our methodology
A decision-driven framework, from situation assessment to documented proof.
- 01Understand
Operational immersion & rapid mapping
- 02Assess
Gap qualification & EBIOS RM risk analysis
- 03Decide
Executive arbitrage & prioritised roadmap
- 04Anchor
Execution governance & auditable evidence library
R&D Project
Scutaria — Independent research initiative
From statute to proof: continuous traceability via regulatory knowledge graph.
An applied research initiative led by Alain Rivelon, Scutaria models a Regulatory Knowledge Graph (RKG) connecting each statutory requirement to operational controls and verifiable evidence artifacts.
Mandatory human review at every arbitration stage.
ARCompliance is an independent advisory practice. Scutaria is a distinct R&D project — not a certification, compliance score, or commercial software.
A regulatory or cyber challenge identified?
Share your context via the form. Every request is reviewed carefully.
Senior independent practice · Zero unsolicited outreach