Feature · Audits · Written by Yobel Tzegai · Last checked 9 October 2026

What goes in an EU AI Act audit pack?

In Complipath (complipath.io), the audit pack is one file for a customer's security review or an auditor: every system with its classification and the article it rests on, the requirements and their evidence, the AI literacy record and the audit log, with a fingerprint on the last page. It comes as a PDF or as a ZIP with the data behind it.

Check your AI systems, free

What the app says it does

One file with every classification, citation and confirmation — the one you hand to someone outside your company.

Illustration · not your dataCompany Your companyLaw version Regulation (EU) 2024/1689, as amendedFingerprint SHA-256 of audit-pack.json

What is in it

A cover: the company, when the pack was made and by whom, the law version with each pinned law file and its SHA-256, and the period the audit log covers.
Per system: what it does, your role, its risk class (marked not confirmed yet where it is), the article, the engine version, when it was assessed and who confirmed it.
Per system: its requirements with article, status and owner. Beside each, the evidence linked to it, with the passage.
The AI literacy record, the audit log and the change history per system.
Where something is not on the record, the pack says Not recorded yet instead of guessing.

The ZIP

The same PDF and the data behind it: audit-pack.json, systems.csv, requirements.csv, evidence.csv, change-history.csv, audit-log.csv, one JSON file per system with its assessment record, open-steps.csv where the step-by-step plan is on, ai-literacy-record.csv where AI literacy is in your plan, and SHA256SUMS.txt for every file in it, so anyone can recompute the fingerprint.

Where it is in the app

Download audit pack, on the dashboard and in Audits as the quick audit pack: one PDF with every system, its risk class, the law behind it and your proof.

What it does not do

It does not let you pick systems: the pack carries every system in the workspace, archived ones marked. A locked version of an audit is the way to send a chosen set to one customer.
The PDF prints the latest 300 lines of the audit log; the ZIP's audit-log.csv carries up to 10,000.
No model is called when the pack is made: it gathers what the workspace records and prints it.

Starter

€499 a month

Prices exclude VAT.

Up to 20 AI systems
Every duty, deadline and article
Evidence and the audit log
Your first system is free, with no end date

Check your AI systems, free

All plans

Questions

What is the fingerprint?

The SHA-256 of the pack's own data file, audit-pack.json, printed on the last page of the PDF. The ZIP carries that file and a list of checksums for every file in it, so anyone can recompute the fingerprint and see that nothing in the pack was changed after it was made.

Can I choose which systems go in?

Not in the audit pack: it carries every system in the workspace, with archived ones marked. To send a chosen set of systems to one customer, lock a version of an audit in Audits: it builds the same kind of pack for that audit's systems only, with the audit log of the 90 days before the lock, and freezes it with its own fingerprint.

Does AI write any of it?

No. Through your own access, the pack only gathers and prints what your workspace already records. The classifications in it come from the rule engine and were confirmed by a person, and no model is called when the pack is made. Rules decide. AI only drafts. A person confirms.

Which plan includes it?

Starter, at €499 a month, and the trial. Prices exclude VAT. The app shows the audit pack with the badge Growth feature · included in Starter: Growth is not available yet, so Starter is the plan to buy, and it is included there.