How is your team actually handling AI compliance right now?

I'm launching ComplyLayer on Product Hunt in a few days, and before you scroll past, I'm genuinely curious how this community is handling something most companies are quietly struggling with.

Your team is almost certainly using Claude, Copilot, Open AI API and a handful of other AI tools already. But under the EU AI Act, GDPR, and the newer US privacy laws, you're now expected to know exactly which tools are in use, what data they touch, and to have documentation proving you govern them.

So I'll just ask directly:

• Do you actually know every AI tool your team uses today?

• Who owns AI compliance at your company, if anyone?

• Is it a spreadsheet, a consultant, or honestly nothing yet?

No wrong answers, I'm just trying to hear how real teams are approaching this. I'll share what we learned building ComplyLayer in the replies.