INSTRAT360: Operating governed AI under the EU AI Act and GDPR | Saga