This paper provides a detailed comparison between the safety and security measures proposed in the EU AI Bill’s General Purpose AI (GPAI) Code of Conduct (third draft) and the current commitments and practices voluntarily adopted by leading AI companies. As the EU moves towards implementing binding obligations for GPAI model providers, a code of conduct is crucial to serve as a bridge between legal requirements and concrete technical commitments. This analysis focuses on the safety and security sections of the draft (Commitments II.1-II.16) and documents excerpts from current public documentation relevant to each measure. A variety of document types, such as state-of-the-art safety frameworks and model cards from more than a dozen companies, including OpenAI, Anthropic, Google DeepMind, Microsoft, Meta, and Amazon, are systematically reviewed. This report does not represent legal compliance, nor does it take any normative view on codes of conduct or company policies. Instead, it aims to facilitate ongoing dialogue between regulators and general purpose AI model providers by providing precedents for a range of industry measures. Nonetheless, for most of the measures in Promises II.1-II.16, we were able to find relevant citations in documents from at least five companies.