EU AI Act compliance tools, side by side

“Align AI risk assessments and tiering to global frameworks like the EU AI Act, NIST, and ISO 42001.”OneTrust, in their words and not ours. It was read on 9 October 2026 from onetrust.com.

“Automate model documentation, audit-ready evidence, and regulatory reporting outputs.”OneTrust, in their words and not ours. It was read on 9 October 2026 from onetrust.com.

“OneTrust operationalizes post‑market monitoring by turning runtime signals into governance action.”OneTrust, in their words and not ours. It was read on 9 October 2026 from onetrust.com.

“Continuously monitor performance, drift, safety, and quality signals across models and agents.”OneTrust, in their words and not ours. It was read on 9 October 2026 from onetrust.com.

“Explore OneTrust certifications, audit reports, and related trust records in one place (SOC 2, ISO, and more).”OneTrust, in their words and not ours. It was read on 9 October 2026 from onetrust.com. Their trust page, which lists "ISO/IEC 27001 Certification".

“Full access to all 166 regulations, 80 risk categories, and 116 controls is free, with no gated tiers on the core mapping.”Credo AI, in their words and not ours. It was read on 9 October 2026 from credo.ai. About their AI Governance Insights Hub.

“EU AI Act Full alignment with European AI regulation including risk classification and conformity assessments”Credo AI, in their words and not ours. It was read on 9 October 2026 from credo.ai.

“Every entry is mapped, versioned, and dated.”Credo AI, in their words and not ours. It was read on 9 October 2026 from credo.ai. About the data library of their AI Governance Insights Hub.

“They are responsible for proving that their system meets the policy pack requirements”Credo AI, in their words and not ours. It was read on 9 October 2026 from credo.ai. About vendors in their Vendor Portal.

“With our Responsible AI platform, organizations can generate artifacts to support and facilitate the auditing of their AI/ML Systems.”Credo AI, in their words and not ours. It was read on 9 October 2026 from credo.ai.

“It’s how the platform understands that a model used in EU healthcare requires different controls than one used in US financial services, and enforces those distinctions automatically.”Credo AI, in their words and not ours. It was read on 9 October 2026 from credo.ai.

“Executive education and hands-on workshops and AI Governance literacy programs”Credo AI, in their words and not ours. It was read on 9 October 2026 from credo.ai. Their advisory service.

“Our platform allows you to track and manage AI governance evidence, ensuring that each AI use case in your organization has the necessary documentation and technical assessment results to produce transparency reports and disclosures.”Credo AI, in their words and not ours. It was read on 9 October 2026 from credo.ai. Their artifacts page; Article 50 is not named.

“Continuous monitoring, drift detection and real-time alerts by connecting to your observability and monitoring tools”Credo AI, in their words and not ours. It was read on 9 October 2026 from credo.ai.

“Classify your AI systems by risk.”Holistic AI, in their words and not ours. It was read on 9 October 2026 from holisticai.com.

“Automatically extract relevant information from your evidence bank and compare it against your specific obligations.”Holistic AI, in their words and not ours. It was read on 9 October 2026 from holisticai.com.

“Generate compliance reports for EU AI Act, NIST, and ISO 42001”Holistic AI, in their words and not ours. It was read on 9 October 2026 from holisticai.com.

“Map obligations.”Holistic AI, in their words and not ours. It was read on 9 October 2026 from holisticai.com.

“Limited Risk – transparency rules”Holistic AI, in their words and not ours. It was read on 9 October 2026 from holisticai.com. A tier listed under "Risk-based classification"; Article 50 is not named.

“Once deployed, AI systems are monitored continuously for signals that indicate risk level changes—drift, degradation, violations, and anomalies.”Holistic AI, in their words and not ours. It was read on 9 October 2026 from holisticai.com.

“Customer data is hosted in the UK by default.”Holistic AI, in their words and not ours. It was read on 9 October 2026 from holisticai.com.

“Our information security management system was certified against ISO/IEC 27001:2022 following a Stage 2 audit by our certification body, with no nonconformities raised.”Holistic AI, in their words and not ours. It was read on 9 October 2026 from holisticai.com.

“Paid plans start at €1,500 per product, per year.”Legalithm, in their words and not ours. It was read on 9 October 2026 from legalithm.com. The same page says "Both paid doors end in a conversation, because there is nothing to check out yet."

“The assessment is free, with no account.”Legalithm, in their words and not ours. It was read on 9 October 2026 from legalithm.com.

“Know if your AI system is unacceptable, high, limited, or minimal risk”Legalithm, in their words and not ours. It was read on 9 October 2026 from legalithm.com.

“45 AI Act obligations, each cited to the Article.”Legalithm, in their words and not ours. It was read on 9 October 2026 from legalithm.com.

“The GitHub Action reports its findings into your pipeline: legal basis, corpus version, required action, and whether evidence was found.”Legalithm, in their words and not ours. It was read on 9 October 2026 from legalithm.com.

“You can optionally create a free Legalithm account to get deeper analysis, track multiple AI systems, generate Annex IV documentation, and receive compliance monitoring alerts.”Legalithm, in their words and not ours. It was read on 9 October 2026 from legalithm.com.

“Collect and organize evidence artifacts linked to obligations and review steps.”Legalithm, in their words and not ours. It was read on 9 October 2026 from legalithm.com. A card on their platform page.

“Primary output: A dated, cited compliance record you can show to auditors, customers, and investors.”Legalithm, in their words and not ours. It was read on 9 October 2026 from legalithm.com.

“Track your whole AI inventory, get per-system obligations, and generate Article 50 disclosures.”Legalithm, in their words and not ours. It was read on 9 October 2026 from legalithm.com.

“AI disclosure generator for any website”Legalithm, in their words and not ours. It was read on 9 October 2026 from legalithm.com.

“Core application data is stored in EU infrastructure, Frankfurt region.”Legalithm, in their words and not ours. It was read on 9 October 2026 from legalithm.com.

“No SOC 2, ISO 27001 or ISO 42001 certification”Legalithm, in their words and not ours. It was read on 9 October 2026 from legalithm.com.

“Free for one system, from €290 per month.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.

“Explore is free for one AI system with no time limit.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.

“Risk Classifier Assigns EU AI Act tiers based on use case and data flows.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.

“We version the regulatory content our assessments run against and date every deliverable, so you can always tell which text a conclusion was reached under.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.

“Annex IV Automation Generates and maintains the technical file with every model version.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.

“A number hides missing evidence inside an average; the platform shows which criterion, at which level, and why.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.

“The platform produces the evidence and the report those processes rely on.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.

“Role-based tracks for executives, technical teams and the wider workforce, delivered by PhD-level practitioners — including the Article 4 AI literacy duty.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com. Their training offer.

“Article 50 Transparency Pack”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com. The name of a one-off pack on their product page.

“Post-Market Monitoring Drift, incident, and usage telemetry tied to your obligations.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.

“Drift and incident monitoring”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.

“ComplianceEngine runs on EU-hosted infrastructure or inside your own environment.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.

“Starter €300–800 / month”Euridium, in their words and not ours. It was read on 9 October 2026 from euridium.eu. The same page says "Prices are hypotheses until the first pilots confirm them, and we say so."

“Or start with the free check”Euridium, in their words and not ours. It was read on 9 October 2026 from euridium.eu.

“Each system gets a risk tier, and the reason is written out.”Euridium, in their words and not ours. It was read on 9 October 2026 from euridium.eu.

“Article by article, with the proof expected.”Euridium, in their words and not ours. It was read on 9 October 2026 from euridium.eu.

“The authoritative text of the EU AI Act is Regulation (EU) 2024/1689 as published in the Official Journal of the European Union (12 July 2024), as amended by Regulation (EU) 2026/1744.”Euridium, in their words and not ours. It was read on 9 October 2026 from euridium.eu. The site footer.

“The Annex IV documentation, ready to hand over.”Euridium, in their words and not ours. It was read on 9 October 2026 from euridium.eu.

“A policy, a supplier contract, a model card, a training-data sheet: each item is dated and attached to every obligation it supports.”Euridium, in their words and not ours. It was read on 9 October 2026 from euridium.eu.

“Export the Annex IV documentation and the audit trail.”Euridium, in their words and not ours. It was read on 9 October 2026 from euridium.eu.

“Euridium holds, for each AI system, the obligations that apply, the evidence, the signatures and the audit trail.”Euridium, in their words and not ours. It was read on 9 October 2026 from euridium.eu.

“Your workspace data is stored on EU-based cloud infrastructure.”Euridium, in their words and not ours. It was read on 9 October 2026 from euridium.eu.

“We do not currently hold formal third-party certifications such as SOC 2 or ISO/IEC 27001”Euridium, in their words and not ours. It was read on 9 October 2026 from euridium.eu.

“Annual Dossentia license €6,000/yr”Dossentia, in their words and not ours. It was read on 9 October 2026 from dossentia.com. A default value in the home page's savings calculator, which the page calls "Indicative estimate, not a quote."

“Three questions, no sign-up.”Dossentia, in their words and not ours. It was read on 9 October 2026 from dossentia.com. The home page's check, headed "Is your AI high-risk?"

“Register every AI system and classify it under the Act.”Dossentia, in their words and not ours. It was read on 9 October 2026 from dossentia.com.

“Inventory your AI systems, generate Annex IV technical documentation, and register with the EU database, all in one place.”Dossentia, in their words and not ours. It was read on 9 October 2026 from dossentia.com.

“10-year post-market audit trail”Dossentia, in their words and not ours. It was read on 9 October 2026 from dossentia.com. An item in a list the page closes with "All of this is what Dossentia handles for you."

“Dossentia is hosted on Hetzner infrastructure in Finland via Coolify.”Dossentia, in their words and not ours. It was read on 9 October 2026 from dossentia.com.

“Free $0. Pro $1,499/year or $149/month. Unlimited AI systems and use cases on every plan.”ComplyLayer, in their words and not ours. It was read on 9 October 2026 from complylayer.com.

“ComplyLayer has a Free plan that never expires: unlimited AI systems and use cases, risk classification, compliance documents, staff policy acknowledgements and audit reports.”ComplyLayer, in their words and not ours. It was read on 9 October 2026 from complylayer.com.

“Automated risk classification”ComplyLayer, in their words and not ours. It was read on 9 October 2026 from complylayer.com.

“ComplyLayer generates AI Usage Policies, Technical Documentation, Conformity Declarations, Transparency Notices, Data Privacy Notices, Bias Assessment Reports, and more, depending on your selected framework (EU AI Act or US AI & Privacy).”ComplyLayer, in their words and not ours. It was read on 9 October 2026 from complylayer.com.

“Timestamped evidence trail ready for any audit”ComplyLayer, in their words and not ours. It was read on 9 October 2026 from complylayer.com.

“Download PDF compliance reports covering every system, risk level, document status, and your compliance score.”ComplyLayer, in their words and not ours. It was read on 9 October 2026 from complylayer.com.

“ComplyLayer maps every obligation and generates the documents regulators expect.”ComplyLayer, in their words and not ours. It was read on 9 October 2026 from complylayer.com.

“EU AI Act Article 4 requires measures that support AI literacy. Send policies, collect signed acknowledgements, build an audit trail.”ComplyLayer, in their words and not ours. It was read on 9 October 2026 from complylayer.com.

“Generate AI Usage Policies, Technical Docs, and Transparency Notices, personalised for your organisation in one click.”ComplyLayer, in their words and not ours. It was read on 9 October 2026 from complylayer.com.

“All customer data is hosted on Amazon Web Services in the EU (Frankfurt, Germany, eu-central-1) region.”ComplyLayer, in their words and not ours. It was read on 9 October 2026 from complylayer.com.

“On our roadmap: SOC 2 Type II and ISO/IEC 27001. We'll publish reports here once completed, and we won't claim a certification before we hold it.”ComplyLayer, in their words and not ours. It was read on 9 October 2026 from complylayer.com.

“Auto-classify every AI system against Annex III categories with audit trail.”Enzai, in their words and not ours. It was read on 9 October 2026 from enz.ai.

“Technical documentation captured continuously per high-risk system - not reconstructed.”Enzai, in their words and not ours. It was read on 9 October 2026 from enz.ai.

“Per-system evidence trail”Enzai, in their words and not ours. It was read on 9 October 2026 from enz.ai.

“Per-framework evidence trail surfaced on demand - assessor, auditor, board, regulator.”Enzai, in their words and not ours. It was read on 9 October 2026 from enz.ai.

“You can see where each AI sits against each framework and drill into the specific obligations that are short of compliance.”Enzai, in their words and not ours. It was read on 9 October 2026 from enz.ai.

“Article 5 transparency + watermarking obligations live in the platform from Dec 2026.”Enzai, in their words and not ours. It was read on 9 October 2026 from enz.ai.

“From risk classification to post-market monitoring - Enzai operationalizes EU AI Act compliance.”Enzai, in their words and not ours. It was read on 9 October 2026 from enz.ai.

“Enzai syncs with AWS, Azure, GCP, Databricks, Watsonx, and Snowflake for AI asset discovery and monitoring.”Enzai, in their words and not ours. It was read on 9 October 2026 from enz.ai.

“Enzai is ISO 27001 certified, and has been since 2023.”Enzai, in their words and not ours. It was read on 9 October 2026 from enz.ai.

“Optro aligns pricing plans to your business needs so you can quickly achieve value and easily evolve your program over time.”FairNow (Optro), in their words and not ours. It was read on 9 October 2026 from optro.ai.

“Optro helps you categorize your AI systems based on the EU AI Act’s risk levels (from Minimal to Prohibited) and tracks the specific obligations required for each.”FairNow (Optro), in their words and not ours. It was read on 9 October 2026 from optro.ai.

“Link evidence to controls, flag gaps, and cut compliance work from days to hours.”FairNow (Optro), in their words and not ours. It was read on 9 October 2026 from optro.ai.

“Stay audit-ready with continuously updated regulation and framework details”FairNow (Optro), in their words and not ours. It was read on 9 October 2026 from optro.ai.

“Optro helps you categorize your AI systems based on the EU AI Act’s risk levels (from Minimal to Prohibited) and tracks the specific obligations required for each.”FairNow (Optro), in their words and not ours. It was read on 9 October 2026 from optro.ai.

“We ensure you have the necessary documentation ready to meet the EU's stringent transparency requirements.”FairNow (Optro), in their words and not ours. It was read on 9 October 2026 from optro.ai.

“These programs and our extensive control environment are regularly assessed against frameworks like ISO 27001, NIST 800-53, SOC 2, CSA STAR, HIPAA, and more.”FairNow (Optro), in their words and not ours. It was read on 9 October 2026 from optro.ai.

“Starting at $3,500 (monthly pricing)”IBM watsonx.governance, in their words and not ours. It was read on 9 October 2026 from ibm.com.

“Automate policy enforcement, obligation mapping, and compliance evidence capture process—continuously.”IBM watsonx.governance, in their words and not ours. It was read on 9 October 2026 from ibm.com.

“Track governance activities, decisions, and model changes with end-to-end traceability for reporting and accountability.”IBM watsonx.governance, in their words and not ours. It was read on 9 October 2026 from ibm.com.

“Automate policy enforcement, obligation mapping, and compliance evidence capture process—continuously.”IBM watsonx.governance, in their words and not ours. It was read on 9 October 2026 from ibm.com.

“Continuously monitor AI systems for compliance, operational issues, and emerging risks to maintain ongoing oversight.”IBM watsonx.governance, in their words and not ours. It was read on 9 October 2026 from ibm.com.

“The calculator is free, requires no login, and takes about three minutes to fill in.”Modulos, in their words and not ours. It was read on 9 October 2026 from modulos.ai.

“One entry per AI system and agent, with owner, risk classification and controls.”Modulos, in their words and not ours. It was read on 9 October 2026 from modulos.ai.

“Requirements in the library quote the regulation or standard they come from, and framework releases go through automated content checks against those sources.”Modulos, in their words and not ours. It was read on 9 October 2026 from modulos.ai.

“Scope the requirements to your role and risk class, keep the technical documentation current, and test in production that the controls still hold.”Modulos, in their words and not ours. It was read on 9 October 2026 from modulos.ai.

“The Governance Graph links your AI systems to controls, evidence and risk.”Modulos, in their words and not ours. It was read on 9 October 2026 from modulos.ai.

“Audit-ready exports”Modulos, in their words and not ours. It was read on 9 October 2026 from modulos.ai.

“Modulos ships requirement templates built on the published text, at organization level and per AI application, and framework mappings are updated as CEN/CENELEC harmonized standards and Commission guidance land.”Modulos, in their words and not ours. It was read on 9 October 2026 from modulos.ai.

“Modulos Learn gives role-based courses for general staff, technical teams and AI owners.”Modulos, in their words and not ours. It was read on 9 October 2026 from modulos.ai.

“Runtime inspection tests live systems against your policies on a schedule and keeps the evidence trail.”Modulos, in their words and not ours. It was read on 9 October 2026 from modulos.ai.

“Hosting in the EU, the US, the UAE, Singapore and further regions.”Modulos, in their words and not ours. It was read on 9 October 2026 from modulos.ai.

“SOC 2 Type II Report”Modulos, in their words and not ours. It was read on 9 October 2026 from modulos.ai.

“Take advantage of your existing investments and centralize evidence of end-to-end governance.”Monitaur, in their words and not ours. It was read on 9 October 2026 from monitaur.ai.

“Validate AI models at scale with consistent protocols and transparent reporting.”Monitaur, in their words and not ours. It was read on 9 October 2026 from monitaur.ai.

“Maintain an objective pulse on AI risk with automated drift and bias validations.”Monitaur, in their words and not ours. It was read on 9 October 2026 from monitaur.ai.

“Monitaur has maintained SOC2 Type 2 compliance since October 2021.”Monitaur, in their words and not ours. It was read on 9 October 2026 from monitaur.ai.

“But it’s hard to find out your risk level and role. That’s where our free EU AI Act Classifier comes in.”Saidot, in their words and not ours. It was read on 9 October 2026 from saidot.ai.

“Register agents in the Agent Catalogue, classify the risk of tool use, and track inherited risks.”Saidot, in their words and not ours. It was read on 9 October 2026 from saidot.ai.

“Evidence attaches at the control level, so accountability is built in.”Saidot, in their words and not ours. It was read on 9 October 2026 from saidot.ai.

“Export audit-ready transparency reports and run reviews directly on the platform.”Saidot, in their words and not ours. It was read on 9 October 2026 from saidot.ai.

“This three-hour AI literacy training provides your teams with foundational knowledge on the use of AI, its benefits and risks, and how to apply AI governance to keep AI under control.”Saidot, in their words and not ours. It was read on 9 October 2026 from saidot.ai.

“Ingest runtime observability events from your AI stack and turn them into governance actions.”Saidot, in their words and not ours. It was read on 9 October 2026 from saidot.ai.

“Saidot's Information Security Management System (ISMS) is ISO/IEC 27001:2022 certified. Certification body: Prescient Security.”Saidot, in their words and not ours. It was read on 9 October 2026 from saidot.ai.

“To learn more or get a custom quote, reach out to the Scrut team with your compliance requirements.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.

“Scrut Teammates detect evidence from your tech stack, map controls across 70+ frameworks, and flag drift the moment it happens.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.

“Scrut also generates audit-ready reports that include control status, evidence summaries, timestamps, and activity logs.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.

“Scrut continuously checks whether discovered AI applications have been reviewed and whether restricted applications remain in use.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.

“The platform is certified for ISO/IEC 27001, ISO/IEC 42001, SOC 2, ISO 27701, GDPR, and CCPA, and applies these standards across infrastructure, processes, and product features.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.

“Get a Personalized Quote”Securiti, in their words and not ours. It was read on 9 October 2026 from securiti.ai.

“Classify AI systems per global regulations”Securiti, in their words and not ours. It was read on 9 October 2026 from securiti.ai.

“With the AI Governance solution, organizations can conduct comprehensive processes involving all AI components and functionalities used within their workflows, including model risk identification, analysis, controls, monitoring, documentation, categorization assessment, fundamental rights impact assessment, and conformity assessment.”Securiti, in their words and not ours. It was read on 9 October 2026 from securiti.ai.

“Automate compliance checks, generate reports”Securiti, in their words and not ours. It was read on 9 October 2026 from securiti.ai.

“Map AI models to data sources, monitor data flow”Securiti, in their words and not ours. It was read on 9 October 2026 from securiti.ai.

“Securiti is SOC2 Type II certified.”Securiti, in their words and not ours. It was read on 9 October 2026 from securiti.ai.

“From €39.00/mo. 14-day trial, no credit card. Cancel anytime.”SetAIComply, in their words and not ours. It was read on 9 October 2026 from setaicomply.com.

“Absolutely. Our free plan lets you register up to 3 AI systems with 2 users and explore the platform with no time limit.”SetAIComply, in their words and not ours. It was read on 9 October 2026 from setaicomply.com.

“Instantly classify your AI systems as prohibited, high-risk, limited, or minimal risk using our guided questionnaire aligned with Articles 5, 6, and Annex III.”SetAIComply, in their words and not ours. It was read on 9 October 2026 from setaicomply.com.

“An assistant grounded in the official EU AI Act text, in all 24 EU languages — answers cite the articles they rely on. From the Starter plan.”SetAIComply, in their words and not ours. It was read on 9 October 2026 from setaicomply.com.

“Auto-generate all 9 mandatory Annex IV technical documentation sections using AI, tailored to your specific system and use case.”SetAIComply, in their words and not ours. It was read on 9 October 2026 from setaicomply.com.

“Every obligation in the platform can carry the artefacts that prove it — documents, assessments, test results, audit trail entries.”SetAIComply, in their words and not ours. It was read on 9 October 2026 from setaicomply.com.

“Track your progress on the compliance dashboard, close remaining gaps, and export audit-ready documentation for regulators.”SetAIComply, in their words and not ours. It was read on 9 October 2026 from setaicomply.com.

“Obligations checklist”SetAIComply, in their words and not ours. It was read on 9 October 2026 from setaicomply.com.

“A free Article 4 AI-literacy course with a quiz and certificate, in 24 languages — evidence your Article 4 measures in minutes. The Act asks for measures, not for a guaranteed level.”SetAIComply, in their words and not ours. It was read on 9 October 2026 from setaicomply.com.

“Monitoring plan plus an incident register with reporting deadlines”SetAIComply, in their words and not ours. It was read on 9 October 2026 from setaicomply.com.

“All customer data is hosted in the European Union (Amsterdam, Netherlands).”SetAIComply, in their words and not ours. It was read on 9 October 2026 from setaicomply.com.

“SetAIComply is not SOC 2 or ISO 27001 certified, and does not claim to be.”SetAIComply, in their words and not ours. It was read on 9 October 2026 from setaicomply.com.

“Assign AI risk levels”Sprinto, in their words and not ours. It was read on 9 October 2026 from docs.sprinto.com.

“Each framework is divided into criteria, which are linked to controls, automated checks, and workflow checks to ensure continuous compliance.”Sprinto, in their words and not ours. It was read on 9 October 2026 from docs.sprinto.com.

“Generate DPIA reports for audit and compliance purposes”Sprinto, in their words and not ours. It was read on 9 October 2026 from docs.sprinto.com.

“Sprinto can monitor and surface AI-related violations involving:”Sprinto, in their words and not ours. It was read on 9 October 2026 from docs.sprinto.com.

“AI Act & GDPR compliance from €49/month at launch.”Themio, in their words and not ours. It was read on 9 October 2026 from themio.ai.

“Test our free diagnostic tool to see if your Themio audit reports should cover these requirements.”Themio, in their words and not ours. It was read on 9 October 2026 from themio.ai.

“AI system classification, transparency obligations, governance, technical documentation”Themio, in their words and not ours. It was read on 9 October 2026 from themio.ai.

“Every finding cites the exact regulatory article and quotes the relevant passage from your source document.”Themio, in their words and not ours. It was read on 9 October 2026 from themio.ai.

“Everything is exportable to PDF, ready to present to your regulator, investors, or board of directors.”Themio, in their words and not ours. It was read on 9 October 2026 from themio.ai.

“AI system classification, transparency obligations, governance, technical documentation”Themio, in their words and not ours. It was read on 9 October 2026 from themio.ai.

“Your documents are hosted exclusively on servers located in the European Union, encrypted in transit and at rest.”Themio, in their words and not ours. It was read on 9 October 2026 from themio.ai.

“Risk-based routing automatically assigns review depth by risk tier”Trustible, in their words and not ours. It was read on 9 October 2026 from trustible.ai.

“Trustible generates and maintains this through intake workflows, risk assessments, and AI Inventory records.”Trustible, in their words and not ours. It was read on 9 October 2026 from trustible.ai.

“Map controls once and satisfy every framework, with audit-ready evidence at every step, automatically.”Trustible, in their words and not ours. It was read on 9 October 2026 from trustible.ai.

“Evidence packages bundle the records auditors ask for: intake decisions, risk and impact assessments, approval history, periodic reviews, and policy sign-offs, each timestamped to the use case record.”Trustible, in their words and not ours. It was read on 9 October 2026 from trustible.ai.

“Trustible's Automated Workflows capture use case context during intake, including whether your organization built the system or is using a third party's, so the right set of obligations gets applied from the start.”Trustible, in their words and not ours. It was read on 9 October 2026 from trustible.ai.

“A dedicated set of controls for obligations unique to the EU AI Act: CE marking, Annex IV technical documentation formats, GPAI transparency requirements, and post-market monitoring.”Trustible, in their words and not ours. It was read on 9 October 2026 from trustible.ai.

“Continuous oversight of live AI systems, with key metrics and incidents tracked against every use case.”Trustible, in their words and not ours. It was read on 9 October 2026 from trustible.ai.

“SOC 2 certified”Trustible, in their words and not ours. It was read on 9 October 2026 from trustible.ai.

“Request a free demo today to discuss your business needs and get personalized pricing.”Vanta, in their words and not ours. It was read on 9 October 2026 from vanta.com.

“Classify AI systems by role and risk level using Vanta’s readiness framework, so you scope obligations the right way from the start.”Vanta, in their words and not ours. It was read on 9 October 2026 from vanta.com.

“Automated evidence collection for audit readiness”Vanta, in their words and not ours. It was read on 9 October 2026 from vanta.com.

“Basic reporting and audit workflows, code change, and continuous controls monitoring”Vanta, in their words and not ours. It was read on 9 October 2026 from vanta.com.

“Inventory AI systems, classify by role and risk, and map to applicable obligations.”Vanta, in their words and not ours. It was read on 9 October 2026 from vanta.com.

“Track model behavior, log incidents, and maintain transparency records to meet the Act’s post-market monitoring and reporting obligations.”Vanta, in their words and not ours. It was read on 9 October 2026 from vanta.com.

“Track model behavior, log incidents, and maintain transparency records to meet the Act’s post-market monitoring and reporting obligations.”Vanta, in their words and not ours. It was read on 9 October 2026 from vanta.com.

“Vanta maintains a SOC 2 Type II attestation and an ISO 27001 compliance certification.”Vanta, in their words and not ours. It was read on 9 October 2026 from vanta.com.

“The public beta is free with 30% off locked in for life; from the full launch, Classify, Starter (€79), Govern (€199) and Manage (€599), Enterprise by quote;”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.

“Register up to three systems, classify them, and read the article each conclusion rests on. Free, no card.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.

“Record what it does, who uses it and who is answerable. Role and risk tier fall out of the answers, and the reasoning stays beside the decision rather than in somebody's inbox.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.

“Every obligation cites its article, and every date comes from the regulatory registry rather than from the screen that shows it.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.

“generated documents — Annex IV technical files, fundamental rights impact assessments, declarations of conformity, Annex VIII registration sheets — hash-sealed with a public verification URL.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.

“Evidence links to its duties, and stops counting the day it lapses.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.

“The evidence pack export starts at Govern.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.

“Your role and risk tier decide the list. You never assemble it by hand.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.

“Free, role-based EU AI Act training, with a certificate your Article 4 register counts.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.

“Work the obligations you actually have — Art. 4 literacy and Art. 50 transparency — with owners, dates and evidence.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.

“Post-market monitoring plan and serious-incident reporting workflow.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.

“Yes. Your compliance data is stored and processed in the EEA: the application, database and object storage run on Hetzner in Germany, and Aria's AI processing runs on Mistral in France.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.

“We have not yet completed an external penetration test or a third-party audit; when we do, the report will be available here.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.

“SimpleAct costs €199 per month on the Starter plan and €349 per month on Professional. Billed annually, it is €159 and €279 per month. Enterprise is priced on request. All prices are excl. VAT, and you can try it free for 7 days.”SimpleAct, in their words and not ours. It was read on 14 October 2026 from simpleact.eu. Pricing page; the same page also says "All prices net, excl. VAT" and "All amounts net, excl. VAT. Enterprise is priced individually."

“Six questions on scope, role and area of use – the result gives you the likely risk class along with obligations and deadlines.”SimpleAct, in their words and not ours. It was read on 14 October 2026 from simpleact.eu. Under the heading "Free quick check" on the home page (a free scoping check, not a free plan).

“The guided questionnaire checks prohibited practices, Annex III high-risk triggers and transparency obligations. Classification follows rule-based from the answers.”SimpleAct, in their words and not ours. It was read on 14 October 2026 from simpleact.eu. Their wording, typo included; the product page repeats it as "Risk classification Guided questionnaire, rule-based EU AI Act classification with rationale." (page 02).

“Professional removes the limits and adds Annex IV documentation or deployer obligations, the vendor and model registers, AI Discovery, governance workflows with an audit readiness score, single sign-on, register export and the GDPR module.”SimpleAct, in their words and not ours. It was read on 14 October 2026 from simpleact.eu. Annex IV documentation is in the Professional plan, not in Starter ("Starter covers up to 5 AI systems and 3 users with the AI inventory, risk classification, checklists and reporting.").

“Hosting Hetzner, Germany. No cloud providers outside the EU”SimpleAct, in their words and not ours. It was read on 14 October 2026 from simpleact.eu. Home page; the page header also says "Hosted in Germany · Complete audit history · GDPR + EU AI Act" and a second line says "Data residency Germany – servers in Nuremberg, backups in Falkenstein (Hetzner)".

“Starter Monthly: €99/month Annual: €999/year when billed annually Capacity: 5 AI systems, 1 user”RiskOnyx, in their words and not ours. It was read on 14 October 2026 from riskonyx.com. Row "Entry price and capacity", RiskOnyx column; the FAQ (page 06) names three higher monthly plans, with annual options. Whether prices include or exclude VAT: not stated on the pages we read.

“Yes. RiskOnyx is built to support structured AI system classification and governance assessment against relevant regulatory and framework expectations.”RiskOnyx, in their words and not ours. It was read on 14 October 2026 from riskonyx.com. Answer to "Can RiskOnyx help classify AI systems?"; whether the classification is rule-based or AI/LLM-based is not stated on the pages we read.

“✓ Yes, Spain”RiskOnyx, in their words and not ours. It was read on 14 October 2026 from riskonyx.com. Row "Fully EU-based", RiskOnyx column, answering "Is the provider legally and operationally EU-based?" This is where the company is established; where customer data is hosted is not stated on the pages we read.

“€199 – €399/mo Billed monthly. Cancel anytime. Pricing scales with the number of AI systems you maintain.”ActTier, in their words and not ours. It was read on 14 October 2026 from acttier.com. Under "Pricing", three adjacent lines; whether prices include or exclude VAT is not stated on the page we read.

“The 24-hour classification is yours to keep, free.”ActTier, in their words and not ours. It was read on 14 October 2026 from acttier.com. A free written risk classification per AI system, not a free plan; the paragraph continues "If you want to maintain compliance as your product evolves — re-classify when you ship new AI features, regenerate Annex IV docs, track changes for auditors — that's the paid plan."

“Each system classified against the Act's four tiers (prohibited / high-risk / limited / minimal), mapped to specific Annex III criteria. Delivered as a written report you can hand to your prospect's procurement team.”ActTier, in their words and not ours. It was read on 14 October 2026 from acttier.com. Under "Risk Classification — 24 hours"; whether the classification is rule-based, AI/LLM-based or done by people is not stated (the inventory step says "We walk through your product and ops in 30 minutes").

“Pre-filled technical documentation, conformity templates, and transparency disclosures. Audit-ready. Versioned as your product evolves.”ActTier, in their words and not ours. It was read on 14 October 2026 from acttier.com. Under "Annex IV Documentation".

“Contextual risk analysis based on AI deployment, data sources, and intended use”Kertos, in their words and not ours. It was read on 14 October 2026 from kertos.io. AI risk assessment page, a feature bullet; the same page says "Continuously updated AI-specific risk library, aligned with the EU AI Act & ISO/IEC 23894"; whether it is rule-based or AI/LLM-based is not stated ("Proactively detect risks in AI development and deployment with our intelligent platform.").

“Instantly classify AI systems by risk level”DataGuard, in their words and not ours. It was read on 14 October 2026 from dataguard.com. EU AI Act landing page, a bullet; whether it is rule-based or AI/LLM-based is not stated.