AI notice

  • Updated 5 November 2026

Draft awaiting legal review. Items marked [to be confirmed] or [to be decided] are not final.

The NIS2 compliance assistant on this website is an AI system. This notice explains what it is, what it can and cannot do, and how your conversations are handled.

1. You are talking to an AI

The compliance assistant on the NIS2 page generates its answers with artificial intelligence; it is not a human adviser. We say so next to the chat window at all times, as the transparency obligation in Article 50 of the EU Artificial Intelligence Act (Regulation (EU) 2024/1689) requires.

2. How it works

  • The assistant first searches its knowledge base, then answers. The knowledge base contains the NIS2 Directive (Directive (EU) 2022/2555), the Swedish Cybersecurity Act (2025:1506), the Swedish Cybersecurity Ordinance (2025:1507) and our own FAQ.
  • Every answer names the provisions it relies on, so you can check the source text.
  • Before launch the assistant passed 134 acceptance tests with 97% of answers correct; it is tested again after every update.
  • When something is outside its knowledge base, the assistant says so instead of guessing.

3. What it cannot do

  • Its answers are not legal advice. It helps you form a first view of what NIS2 requires; conclusions about your company’s situation should be confirmed with our advisers.
  • It mainly covers the EU directive and Swedish national law, and cannot answer in depth for the national laws of other member states.
  • AI can make mistakes. Before important decisions, rely on the legal text and professional advice.
  • The assistant currently answers in Chinese; you can ask in English.

4. Human oversight

  • For a formal conclusion, book a consultation and one of our advisers will look at your situation.
  • We regularly review the assistant’s answers and run regression tests against a test set to keep improving quality.

5. Your conversations

  • Your questions and the assistant’s answers are kept for a limited time for troubleshooting and quality improvement; see the privacy policy.
  • Please do not enter sensitive personal data or confidential business information.
  • The assistant runs on servers in the EU (Sweden). To generate an answer, your question is sent to a large language model provider; see the privacy policy.

6. Risk classification

In our assessment the assistant provides information retrieval and question answering and does not fall under the high-risk uses listed in Annex III of the AI Act. [For legal review]

7. Contact

For questions about this notice or the assistant’s answers, contact info@swjtu-nordic.com, or use the booking page.