Building a project around AI compliance - seeking advice

Hey folks! Im building a small side project called Legible and figured I might need some feedback from a real world before I commit my self 110% to this.
The basic idea is to make AI compliance less messy for teams building around AI which I guess everyone does it these days, especially when GDPR and EU AI Act questions starts coming up.

Right now Im experimenting with workflows around:

1. Classifying AI feature risk (So a team can understand which AI features are low risk vs higher risk from a compliance standpoint)

2. Showing which obligations apply (Helping teams see what they may need to do under frameworks like GDPR or the EU AI Act)

3. Tracking evidences / missing docs (Making easier to see what documentation, policies, or proof is already in place and what is still missing)

4. Generating reports/pdfs that people can actually use (So teams have something structured they can share internally or use during audits, diligence or reviews.)

A few questions I'd love thoughts on:

1. Is this a painful enough problem to solve?

2. Who usually owns this problem inside a company today?

3. What is the hardest part in practice: figuring out what applies, keeping documentation current, managing vendors/models, or proving compliance to customers/investors?

4. Would something like this be useful as an ongoing product, or mostly when someone asks you for proof?

Here is what I've built so far:

1. Workspace / project flow (Basic structure for organizing compliance work per company or project)

2. Feature inventory (A way to list AI features, models, vendors, and related information in one place)

3. Evidence tracking (Tracking what supporting material exists and what is still missing)

4. Exportable reports

Still early, so just looking for feedback and seeing if this is worth pushing further. If this sounds interesting, I also put up a small waitlist for early access.

Thanks!