Skip to content

Compliance

GDPR and the EU AI Act

Public land registries frequently contain personal data, and a yield model used in a credit decision touches AI transparency duties. Phoeniks handles both through data-subject rights tooling, retention and residency controls, and documented model transparency.

At a glance

Jurisdiction
European Union
Applies to
Processing of personal data in land records, and transparency duties where model output informs decisions about people.
Obligations
3
Markets in scope
0
  1. 01

    Lawful basis, minimisation and retention limits for personal data in land records.

  2. 02

    Data-subject access, rectification and erasure workflows.

  3. 03

    Transparency and human oversight where model output informs consequential decisions.

01

Who it applies to#

Processing of personal data in land records, and transparency duties where model output informs decisions about people.

02

Core obligations#

  • Lawful basis, minimisation and retention limits for personal data in land records.
  • Data-subject access, rectification and erasure workflows.
  • Transparency and human oversight where model output informs consequential decisions.
03

What Phoeniks contributes#

  • Data-subject request handling built into the platform, not handled by email.
  • Retention schedules and regional data residency options.
  • Model cards and documented limitations for every production model version.

Frequently asked

Is Phoeniks a high-risk AI system?
Phoeniks produces agronomic estimates, not automated decisions about individuals. Where a client uses an output inside a consequential decision, the documented model transparency and human-oversight materials are provided to support that client's own classification.

Related pages

Compliance

EUDR — EU Deforestation Regulation

Operators and traders placing cattle, cocoa, coffee, oil palm, rubber, soya or wood on the EU market. How Phoeniks supplies source-attributed farmland and yield evidence against EUDR obligations.

Compliance

CSRD — Corporate Sustainability Reporting Directive

Large EU companies and listed SMEs reporting under ESRS, including value-chain impacts on land use. How Phoeniks supplies source-attributed farmland and yield evidence against CSRD obligations.

Compliance

SFDR and PCAF — sustainability disclosure and financed emissions

Financial market participants disclosing principal adverse impacts, and lenders measuring financed emissions in agriculture. How Phoeniks supplies source-attributed farmland and yield evidence against SFDR / PCAF obligations.

Compliance

SOC 2 — security and availability controls

Vendor security review for institutions procuring a data or analytics platform. How Phoeniks supplies source-attributed farmland and yield evidence against SOC 2 obligations.

Compliance

LGPD — Brazilian data protection law

Processing of personal data relating to Brazilian rural properties and their holders. How Phoeniks supplies source-attributed farmland and yield evidence against LGPD obligations.

Compliance

PDPA — Thai Personal Data Protection Act

Personal data processing tied to Thai agricultural land and rice production records. How Phoeniks supplies source-attributed farmland and yield evidence against PDPA obligations.

Compliance

DPDP — India Digital Personal Data Protection Act

Personal data of Indian data principals in land and production records. How Phoeniks supplies source-attributed farmland and yield evidence against DPDP obligations.

Compliance

CSDDD — Corporate Sustainability Due Diligence Directive

Large EU and non-EU companies required to identify, prevent and account for adverse environmental and human-rights impacts across their chain of activities. How Phoeniks supplies source-attributed farmland and yield evidence against CSDDD obligations.

Compliance

TNFD — nature-related financial disclosures

Financial institutions and corporates disclosing nature-related dependencies, impacts, risks and opportunities under the LEAP approach. How Phoeniks supplies source-attributed farmland and yield evidence against TNFD obligations.

Compliance

EU Taxonomy — environmentally sustainable activities

Financial and non-financial undertakings reporting the share of turnover, capex and opex aligned with the taxonomy's technical screening criteria. How Phoeniks supplies source-attributed farmland and yield evidence against EU Taxonomy obligations.

Compliance

IFRS S2 — climate-related disclosures (ISSB)

Entities applying ISSB standards to disclose climate-related risks, opportunities, metrics and scenario resilience. How Phoeniks supplies source-attributed farmland and yield evidence against IFRS S2 / ISSB obligations.

Compliance

Bank climate risk — Basel and ECB supervisory expectations

Banks integrating climate and environmental risk into credit granting, ICAAP, stress testing and Pillar 3 disclosure. How Phoeniks supplies source-attributed farmland and yield evidence against Bank climate risk obligations.

Compliance

Solvency II — insurer model governance

Insurers and reinsurers whose technical provisions or internal models rely on external data and third-party model output. How Phoeniks supplies source-attributed farmland and yield evidence against Solvency II obligations.

Compliance

EU AI Act — transparency and model governance

Providers and deployers of AI systems used in decisions affecting access to credit, insurance or other essential services. How Phoeniks supplies source-attributed farmland and yield evidence against EU AI Act obligations.

Compliance

ISO 27001 — information security management

Institutional buyers whose vendor onboarding requires a certified information security management system alongside SOC 2 evidence. How Phoeniks supplies source-attributed farmland and yield evidence against ISO 27001 obligations.

Compliance

Carbon MRV — Verra, Gold Standard and market integrity rules

Project developers and buyers needing monitoring, reporting and verification evidence for agricultural soil-carbon and land-use claims. How Phoeniks supplies source-attributed farmland and yield evidence against Carbon MRV obligations.

Compliance

Privacy Act 1988 — Australian agricultural data

Handling of personal information about Australian landholders, alongside national agricultural data standards. How Phoeniks supplies source-attributed farmland and yield evidence against Privacy Act 1988 obligations.

Compliance

Kenya Data Protection Act 2019

Processing of personal data relating to Kenyan producers, including transfer outside Kenya for analysis or reporting. How Phoeniks supplies source-attributed farmland and yield evidence against Kenya DPA 2019 obligations.

Comparison

EUDR vs CSRD

EUDR and CSRD side by side: who is in scope, what evidence each demands, and where the two regimes overlap.

Comparison

EUDR vs SFDR

Compare the EU Deforestation Regulation with the Sustainable Finance Disclosure Regulation: scope, obligated party, evidence, and how farmland data serves both.

See also

Request access

Institutional access. No self-serve trial.

Request access