Enterprise AI Governance & Compliance Platform
Mohammad Zeeshan Lead Developer & Architect GitHub: @m-zest
Parity AI is a comprehensive platform that enables organizations to govern AI systems responsibly, ensure regulatory compliance, and mitigate algorithmic risks. Built for enterprises deploying AI at scale, Parity provides the visibility, controls, and documentation needed to meet emerging AI regulations worldwide.
- Regulatory Readiness — Pre-built compliance frameworks for EU AI Act, NYC LL144, Colorado AI Act, NIST AI RMF, and ISO 42001
- Risk Visibility — Centralized view of AI model inventory, vendor dependencies, and associated risks
- Bias Monitoring — Track fairness metrics across protected attributes with automated testing
- Audit Trail — Complete documentation and evidence management for regulatory audits
- Executive Reporting — One-click PDF reports for board meetings and regulatory submissions
- Public Transparency — Citizen-facing transparency portal for democratic AI accountability
- RegulatoryRadar — Autonomous multi-agent regulatory scanning with AI-powered classification and enforcement
| Check | Status |
|---|---|
| TypeScript compilation | Passing |
| Vite production build | Passing (3783 modules) |
| Unit tests (Vitest) | Passing (1/1) |
| ESLint | Configured |
| Page | Route | What It Does |
|---|---|---|
| Landing Page | / |
Full marketing site with hero, product suite, compliance frameworks, FAQ, testimonials, integrations section |
| About | /about |
Company information |
| Auth | /auth |
Sign up / Sign in with Supabase Auth |
| Transparency Portal | /public/transparency |
Public-facing AI system registry — shows deployed AI systems, risk levels, and incident disclosures for citizens |
| Module | Route | Features | Data Source |
|---|---|---|---|
| Dashboard | /dashboard |
Stats cards, charts (tasks/incidents/risk distribution), recent models & incidents, activity feed | Supabase (real-time) |
| Tasks | /tasks |
Task CRUD, assignees, deadlines, status tracking | Supabase |
| Use Cases | /use-cases |
AI use case documentation, approval workflows, CRUD | Supabase |
| Vendors | /vendors |
Vendor registry, risk scoring, security assessments, CSV import, filters, PDF export | Supabase |
| Model Inventory | /models |
AI model registry, lifecycle tracking, risk levels, CSV import, filters, PDF export | Supabase |
| Risk Management | /risks |
Risk register, severity levels, mitigation plans, CRUD, PDF export | Supabase |
| Bias & Fairness | /bias-metrics |
Fairness metrics, bias test results, protected attribute tracking | Supabase |
| Compliance | /compliance |
Framework checklists, assessment workflows, progress tracking, PDF export | Supabase |
| Evidence Hub | /evidence |
Document upload & storage for audit evidence | Supabase Storage |
| Reporting | /reporting |
6 PDF report templates — Models, Vendors, Compliance, Incidents, Risks, Executive | jsPDF generation |
| AI Trust Center | /transparency |
Internal transparency dashboard for governance teams | Supabase |
| Policy Manager | /policies |
Policy documentation and management | Supabase |
| Incidents | /incidents |
Incident reporting, investigation workflow, severity tracking, filters, PDF export | Supabase |
| User Management | /settings/users |
Role-based access control (admin/user/viewer), user listing | Supabase (admin only) |
| RegulatoryRadar | /regulatory-radar |
Autonomous regulatory scanning, AI classification, risk enforcement, PDF export, demo mode | TinyFish + Fireworks AI + Supabase |
RegulatoryRadar is a professional-grade autonomous compliance scanner that monitors government regulatory sources and automatically classifies and enforces new requirements into your Risk Register.
How It Works — 3-Phase Pipeline:
| Phase | What Happens | Technology |
|---|---|---|
| DETECT | 4 TinyFish AI agents browse regulatory sources (EUR-Lex, EU AI Office, NIST, NYC LL144) and extract updates | TinyFish Web Agent API |
| CLASSIFY | Raw scraped data is sent to an LLM for severity classification, category tagging, and recommended action generation | Fireworks AI (Llama 3.1 70B) |
| ENFORCE | Classified alerts are auto-saved as risks in the Risk Register with full source attribution | Supabase |
Features:
- Live scan with animated progress indicators and real-time agent status cards
- 4 regulatory source agents: EUR-Lex, EU AI Office, NIST, NYC Local Law 144
- AI-powered severity classification (Critical / Major / Moderate / Minor)
- Automatic Risk Register enforcement — alerts become tracked risks
- PDF compliance report export with severity breakdown and recommendations
- Demo Mode for presentations — simulated scan with realistic data (no API keys needed)
- Scan history with timestamps, alert counts, and links to Risk Register
- Toast notifications for critical/major alerts
Environment Variables:
VITE_TINYFISH_API_KEY=your-tinyfish-api-key
VITE_FIREWORKS_API_KEY=your-fireworks-api-key
| Tool | Route | What It Does |
|---|---|---|
| System Card Generator | /system-cards |
Generate standardized AI system cards for public disclosure |
| Framework Comparison | /framework-comparison |
Side-by-side comparison of compliance frameworks |
| Risk Heatmap | /risk-heatmap |
Visual heatmap of AI risks across the organization |
| Incident Disclosure | /incident-disclosure |
Public incident disclosure management |
| Product | Route | Description |
|---|---|---|
| FairHire AI | /dashboard |
HR AI governance (default product) |
| MedParity | /products/medparity |
Healthcare AI governance |
| FinParity | /products/finparity |
Financial AI governance |
| ContentGuard | /products/contentguard |
Media AI governance |
| Enterprise | /products/enterprise |
Cross-organization governance |
All reports generate downloadable PDFs with real data from Supabase:
- Model Inventory Report — All AI models with risk levels, status, vendors
- Vendor Risk Assessment — Vendor risk scores, security assessments
- Compliance Status Report — Framework compliance progress and checklists
- Incident Summary Report — Incidents by severity and resolution status
- Risk Management Report — Full risk register with mitigation status
- Executive Dashboard Report — High-level KPIs across all modules
- Full CRUD operations (Create, Read, Update, Delete)
- CSV import for Models and Vendors (via PapaParse)
- Search and filtering on all list views
- Real-time data via TanStack React Query + Supabase
- Dark/Light theme toggle
- Responsive sidebar navigation with collapsible sections
- Role-based access control (admin, user, viewer)
- Toast notifications for all operations
- Organization-scoped data isolation (multi-tenant)
# Install dependencies
npm install
# Run production build — should compile 3783+ modules with no errors
npm run build
# Run tests — should pass all tests
npm test
# Start dev server
npm run dev
# App runs at http://localhost:8080Open http://localhost:8080 in your browser. You should see:
- Hero section with call-to-action buttons
- Key statistics section
- "Why Parity" value proposition cards
- Public sector AI governance section
- Transparency tools showcase
- Product suite cards (FairHire, MedParity, FinParity, ContentGuard, Enterprise)
- Integrations marquee
- Compliance frameworks grid (EU AI Act, NYC LL144, etc.)
- How it works steps
- FAQ accordion
- Final CTA and footer
- Click "Get Started" or navigate to
/auth - Sign up with email/password (Supabase Auth)
- After login, you are redirected to
/dashboard
After login, verify:
- Stats cards show counts for models, vendors, incidents, compliance
- Charts render (task status, incident trends, risk distribution)
- Quick view panels show recent models and incidents
- Activity feed shows recent actions
- Sidebar shows all navigation groups: Main, Discovery, Assurance, Governance, Transparency
- Product switcher in sidebar header lets you switch between products
For any module (e.g., Models at /models):
- Click "Add Model" — form dialog opens
- Fill in details and save — toast confirms creation, table updates
- Click a row to edit — update dialog opens
- Delete via delete button — confirmation dialog, then removal
- Use filters and search to narrow results
On Models (/models) or Vendors (/vendors):
- Click "Import CSV"
- Upload a CSV file with matching columns
- Data is parsed (PapaParse) and bulk-inserted into Supabase
Navigate to /reporting:
- Click any report template card (e.g., "Model Inventory Report")
- A PDF downloads automatically with real data from your database
- Report history table updates with the generated report entry
Navigate to /public/transparency (no login needed):
- Browse public AI system registry
- View risk levels and status of deployed AI systems
- Search and filter by department or risk level
- Click the sun/moon icon in the sidebar footer
- App switches between dark and light themes
- All components respect the theme
- Admin: Can see User Management (
/settings/users), full CRUD on all modules - User: Standard access, no User Management
- Viewer: Read-only access to dashboard and modules
Navigate to /regulatory-radar from the Assurance section in the sidebar:
- Demo Mode — Click "Demo Mode" to run a simulated scan (no API keys needed)
- Agent status cards should animate from "running" to "complete" one by one
- Alert feed should populate with 4 classified alerts
- Stats row should update: Alerts Found, Last Scan time, Success Rate
- Toast notifications appear for critical and major alerts
- Live Scan — Click "Run Regulatory Scan" (requires TinyFish + Fireworks API keys in
.env)- Real agents browse government websites and extract regulatory updates
- Alerts are classified by AI and saved to Risk Register
- Export PDF — Click "Export PDF" to download a compliance report of scan results
- Risk Register Integration — Navigate to Risk Management to see auto-generated risks with "auto-generated" badges
| Framework | Jurisdiction | Focus Area |
|---|---|---|
| EU AI Act | European Union | Comprehensive AI regulation with risk tiers |
| NYC Local Law 144 | New York City | Automated employment decision tools |
| Colorado AI Act | Colorado, USA | High-risk AI consumer protections |
| Illinois AIVOIA | Illinois, USA | AI video interview compliance |
| NIST AI RMF | United States | AI risk management framework |
| ISO 42001 | International | AI management system standard |
| ECOA | United States | Equal Credit Opportunity Act |
| HIPAA | United States | Healthcare data privacy |
| FDA AI/ML | United States | FDA guidelines for AI in healthcare |
| Layer | Technology |
|---|---|
| Frontend | React 18, TypeScript 5.8, Vite 5 |
| UI Components | Tailwind CSS 3, shadcn/ui (Radix primitives) |
| State Management | TanStack React Query 5 |
| Backend | Supabase (PostgreSQL, Auth, Storage, Realtime) |
| AI Agents | TinyFish Web Agent API (regulatory scraping) |
| LLM Classification | Fireworks AI — Llama 3.1 70B (alert classification) |
| Charts | Recharts |
| PDF Generation | jsPDF + jsPDF-AutoTable |
| CSV Import | PapaParse |
| Animations | Framer Motion |
| Forms | React Hook Form + Zod validation |
| Routing | React Router DOM 6 |
| Theming | next-themes (dark/light) |
parity-ai/
├── public/ # Static assets (logo, icons)
├── src/
│ ├── components/
│ │ ├── auth/ # RequireRole guard
│ │ ├── compliance/ # ComplianceFilters, Stats, FrameworkCard
│ │ ├── dashboard/ # DashboardStats, Charts, QuickView, Activity
│ │ ├── incidents/ # IncidentsTable, Filters, FormDialog, Delete
│ │ ├── landing/ # Hero, Header, FAQ, ProductSuite, Footer, etc.
│ │ ├── layout/ # AppLayout, AppSidebar, NotificationsDropdown
│ │ ├── models/ # ModelsTable, Filters, FormDialog, CSVUpload
│ │ ├── ui/ # 40+ shadcn/ui base components
│ │ └── vendors/ # VendorsTable, Filters, FormDialog, CSVUpload
│ │
│ ├── config/ # Feature flags & app configuration
│ ├── constants/ # Route constants, status values
│ ├── hooks/ # 14 React Query hooks (CRUD for all modules)
│ ├── integrations/supabase/ # Supabase client & generated types
│ ├── lib/ # 6 PDF report generators + utils
│ ├── pages/ # 25+ route page components
│ │ ├── products/ # FinParity, MedParity, ContentGuard, Enterprise
│ │ └── regulatory-radar/ # RegulatoryRadar page, agents API, classifier, hooks, demo data
│ ├── test/ # Vitest setup & example test
│ ├── types/ # TypeScript type definitions
│ ├── App.tsx # Root with routes (30+ routes)
│ └── main.tsx # Entry point
│
├── supabase/ # SQL migrations for database setup
├── package.json
├── tailwind.config.ts
├── tsconfig.json
├── vite.config.ts
└── .env.example # Environment variable template
- Node.js 18+
- npm or yarn
- Supabase account (free tier available)
# Clone the repository
git clone https://github.com/m-zest/parity_v2.git
cd parity_v2
# Install dependencies
npm install
# Configure environment
cp .env.example .env
# Add your Supabase credentials to .env:
# VITE_SUPABASE_URL=https://your-project.supabase.co
# VITE_SUPABASE_PUBLISHABLE_KEY=your-anon-key
# Start development server
npm run devThe application will be available at http://localhost:8080.
The application includes built-in demo data for all modules (transparency portal, dashboard charts, etc.), allowing immediate exploration without database configuration. When connected to Supabase, real data replaces demo data automatically.
| Table | Purpose |
|---|---|
organizations |
Multi-tenant organization data |
profiles |
User profiles linked to organizations |
user_roles |
Role-based access (admin, user, viewer) |
models |
AI model inventory |
vendors |
Third-party vendor registry |
incidents |
Incident reports and resolution |
compliance_frameworks |
Regulatory framework definitions |
compliance_assessments |
Assessment records per framework |
framework_checklists |
Checklist items per framework |
risks |
Risk register entries |
bias_tests |
Bias test results |
use_cases |
AI use case documentation |
evidence |
Audit evidence records |
tasks |
Compliance task tracking |
policies |
Policy documents |
notifications |
User notification records |
audit_logs |
Activity audit trail |
- Row-Level Security (RLS) on all tables
- Organization-scoped data isolation
- JWT-based authentication via Supabase Auth
A combined SQL migration file is included in the supabase/ directory for fresh Supabase setup. Run it in the Supabase SQL editor to create all tables, RLS policies, and seed data.
All hooks follow a consistent pattern with React Query:
// Fetch data
const { data, isLoading, error } = useModels();
// Create
const createModel = useCreateModel();
createModel.mutate({ name: "Model Name", status: "pending" });
// Update
const updateModel = useUpdateModel();
updateModel.mutate({ id: "uuid", status: "approved" });
// Delete
const deleteModel = useDeleteModel();
deleteModel.mutate("uuid");Available hooks:
useModels,useCreateModel,useUpdateModel,useDeleteModeluseVendors,useCreateVendor,useUpdateVendor,useDeleteVendoruseIncidents,useCreateIncident,useUpdateIncident,useDeleteIncidentuseRisks,useCreateRisk,useUpdateRisk,useDeleteRiskuseBiasTests,useCreateBiasTest,useDeleteBiasTestuseUseCases,useCreateUseCase,useUpdateUseCase,useDeleteUseCaseuseEvidence,useCreateEvidence,useUploadEvidence,useDeleteEvidenceuseTasks,useCreateTask,useUpdateTask,useDeleteTaskusePolicies,useCreatePolicy,useUpdatePolicy,useDeletePolicyuseNotifications,useMarkAsRead,useMarkAllAsReaduseDashboardStats,useRecentActivityuseCompliance(combined frameworks, assessments, checklists)useCurrentUser,useUsers
- Connect your GitHub repository to Vercel
- Add environment variables:
VITE_SUPABASE_URLVITE_SUPABASE_PUBLISHABLE_KEY
- Deploy
FROM node:18-alpine
WORKDIR /app
COPY package*.json ./
RUN npm ci
COPY . .
RUN npm run build
EXPOSE 8080
CMD ["npm", "run", "preview"]- FairHire AI - HR AI Governance
- MedParity - Healthcare AI Governance
- FinParity - Financial AI Governance
- ContentGuard - Media AI Governance
- Enterprise - Cross-Organization Governance
- Model inventory with CRUD and CSV import
- Vendor management with risk scoring and CSV import
- Incident management workflow with severity tracking
- Compliance framework tracking with checklists (9 frameworks)
- Bias & fairness metric tracking
- Risk register with mitigation plans
- Use case documentation registry
- Evidence hub with file upload management
- PDF report generation (6 report types)
- Task management with assignments and deadlines
- Real-time dashboard with charts and activity feed
- Role-based access control (admin/user/viewer)
- Public transparency portal for citizens
- System card generator
- Framework comparison tool
- Risk heatmap visualization
- Incident disclosure management
- Dark/Light theme support
- Notification system
- Policy management
- Multi-tenant organization support
- Full Supabase integration with RLS
- RegulatoryRadar — Autonomous multi-agent regulatory scanning
- TinyFish integration for web scraping government sources
- Fireworks AI integration for LLM-powered alert classification
- Automatic Risk Register enforcement from regulatory alerts
- RegulatoryRadar PDF compliance report export
- RegulatoryRadar Demo Mode for presentations
- Email notifications for compliance deadlines
- API integrations (Azure ML, AWS SageMaker, Databricks)
- Custom report builder
- Workflow automation
- SSO/SAML authentication
Contributions are welcome! Here's how you can help:
- Fork the repository
- Create a feature branch (
git checkout -b feature/amazing-feature) - Commit your changes (
git commit -m 'Add amazing feature') - Push to the branch (
git push origin feature/amazing-feature) - Open a Pull Request
For major changes, please open an issue first to discuss what you'd like to change.
Mohammad Zeeshan GitHub: @m-zest
Proprietary License - see LICENSE for details.
Copyright (c) 2024-2026 Mohammad Zeeshan