Compare · Complipath vs Aikraft · Last checked 27 October 2026 · Aikraft’s pages read 26 October 2026
Each Aikraft cell is a sentence from their own site, in their words and not ours, with the page it stood on; each Complipath cell is our own page or our status table. Complipath (complipath.io) is EU AI Act compliance software that classifies each AI system with the article behind the answer.
Price. Aikraft's own page, read on 26 October 2026, says "€199"; Complipath Starter at €499 a month or €4,990 a year, with the first system free.
Prices exclude VAT.
Aikraft is among the checkers and templates. Its price, in its own words: €199
aikraft.eu. Complipath is €499 a month or €4,990 a year, up to 20 AI systems. Prices exclude VAT.
Complipath costs more than simple AI Act checkers because it also answers your customers' questionnaires with the source of every answer, builds the audit pack and keeps the evidence. Enterprise governance platforms mostly publish no price; the one we could read, Vanta on AWS Marketplace, lists $14,000.00 for 12 months of its Essentials package, against Complipath's €4,990 a year. The three tiers, side by side.
“Three integrated modules covering the full compliance lifecycle — from initial classification through ongoing monitoring.” In their words and not ours.[90]
Prices exclude VAT. Our price is the one on the pricing page.
Counts = requirements met in full. Partly counts as half. “Not stated” counts as zero and is never guessed. Aikraft: 39 of 50 stated on the 14 pages we read. Complipath: 47 of 50 answered by our own pages.
Live. Every AI system you build or use, with its owner and risk class. The status table: what Complipath is.
“Every AI system enters the inventory once — what it is, what it does, and whether you are the provider or the deployer. That distinction decides which set of AI Act obligations applies to you.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Product walkthrough, screen 01 'Register the system'.
Live. Every AI system you build or use, with its owner and risk class. The status table: what Complipath is.
“Describe each AI system you develop or deploy — name it, tag it by domain, and categorize its primary function.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. 'How it works' step 01.
Live. A person behind every system and every duty. The status table: what Complipath is.
Partly. A read-only GitHub or GitLab connection finds AI libraries, calls to AI services and AI key names in the repositories you choose and suggests them for the register, where a person adds them; the free readiness review suggests systems from your public web pages. Source.
“You decide what to register; Aikraft does not detect or deduplicate systems for you.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Pricing FAQ 'What counts as an AI system?'; their own words say systems are not detected.
With limits. Groups your systems by vendor and shows which papers you hold from each, which are missing and which have expired; for the AI vendors it knows it links the public terms and, where known, the data processing agreement; it quotes a sentence on personal data or training where one was found, with its link and the day read; each quoted page is read again once a month, and a sentence no longer on its page stops showing. The status table: what Complipath is.
Live. Answers go through rules in code, never a language model, so the same answers always give the same result. Rules decide. AI only drafts. A person confirms. The status table: what Complipath is.
“Automatically classify your AI systems under EU AI Act Annex III with our guided assessment engine.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. 'Classify' module card; how the engine decides is not stated (see f05).
Partly. Article 5(1), points (d), (e), (f), (g) and (h) are decided. Points (a), (b) and (c) turn on judgement and are flagged for legal review instead of being decided. Source.
“Fifteen questions across five steps cover the Annex III high-risk categories, transparency duties and prohibited practices. The questions are about your system, not about the regulation.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Walkthrough screen 02.
Yes. A use case that appears in Annex III is high-risk under Article 6(2) unless the Article 6(3) exemption applies. Source.
“Fifteen questions across five steps cover the Annex III high-risk categories, transparency duties and prohibited practices. The questions are about your system, not about the regulation.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Walkthrough screen 02; 'Risk Classification (Annex III)' on every plan (01).
Yes. If the use case appears in Annex III, Article 6(2) classifies it high-risk unless the Article 6(3) exemption applies, and profiling of natural persons blocks the exemption entirely. Source.
Partly. Which obligations follow from the role you stated is decided. Whether you are the provider or the deployer is asked, never inferred. Source.
“Every AI system enters the inventory once — what it is, what it does, and whether you are the provider or the deployer. That distinction decides which set of AI Act obligations applies to you.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. The role is recorded at registration; whether Aikraft helps determine the role is not stated.
With limits. Confirming a classification creates the requirements that follow from it, each with a status, a place for evidence and an owner you fill in: for high risk, the set for the system's role (provider, deployer or both, from its recorded type or confirmed role), and a row for each Article 50 transparency duty. The rows are made at a system's first confirmation; when a later high-risk classification, a role change or a newer catalogue leaves high-risk rows missing, Review proposes them and a person adds them. The status table: what Complipath is.
“The result carries its reasoning and the factor behind it, then turns the risk tier into a concrete obligation list — Annex IV documentation, conformity assessment, EU database registration, human oversight, post-market monitoring, logging and accuracy testing.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Walkthrough screen 03.
Live. Each reason behind a verdict names the provision it rests on, so a reader can check it herself. The status table: what Complipath is.
Live. Each obligation carries the date it applies from, derived from where the provision sits rather than written onto the row. The status table: what Complipath is.
Live. Records the measures you take to support AI literacy under Article 4 as amended: who was briefed on what, and when. It applies whatever your risk level. The status table: what Complipath is.
Yes. Article 50 makes some systems tell people they are dealing with AI, and a system can carry that duty and be high-risk at the same time. Source.
“Fifteen questions across five steps cover the Annex III high-risk categories, transparency duties and prohibited practices. The questions are about your system, not about the regulation.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Transparency duties are checked; the home page also offers 'Check Article 50 in 1 minute'.
Live. Checks the provisions your confirmed records cite against amending acts, and emails everyone in the workspace once per act, naming each system it touches. The status table: what Complipath is.
“Aikraft's regulatory-update engine watches the EU AI Act, its guidance, and the emerging harmonised standards, then flags exactly which of your documented systems are affected — so you update in hours instead of re-auditing from scratch.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Product page 'The recurring value'; 'Regulatory update alerts' from Starter.
Growth, opens at launch. Growth, opens at launch: For a provider of a high-risk system: drafts of the EU declaration of conformity (Article 47, Annex V), the EU database registration (Article 49, Annex VIII), the post-market monitoring plan (Article 72), risk management (Article 9) from the risk register and the quality management system (Article 17), each point quoted from the law; a person completes and signs them The status table: what Complipath is.
“Post-market monitoring is continuous, not a one-off filing. Aikraft measures drift against a saved baseline and raises an alert into the activity log when it crosses the threshold you set.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Walkthrough screen 05; the frame's drift figures are marked as demo data.
With limits. Logs what went wrong with an AI system and shows the date a serious incident must be reported by, from Article 73 (the shortest date that could apply while answers are Not sure), who is told under Article 73(1), Article 75(1a) and Article 26(5), and a GDPR 72-hour line where personal data is involved; a person decides whether it is serious, the owner is reminded; each incident also shows an internal first report within 24 hours and a cause report within two weeks, which are not dates from the Regulation. The status table: what Complipath is.
“Serious-incident reporting workflows”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Listed under 'If you're a deployer'; 'Incident logging' from Starter. Article 73 is not named.
Partly. Complipath does not test models or watch their outputs; a connected Datadog account shows, from your logs, how often each AI service was called and its error rate. Source.
“Aikraft monitors your classified systems for data drift, logs incidents with regulatory-grade audit trails, and alerts you when EU AI Act guidance changes in ways that affect your documented systems.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. 'How it works' step 04; 'Data drift alerts' on every plan.
Partly. Each obligation has an owner, a status and a date it applies from. When an amending act touches a provision your records cite, you get an email per affected system. Source.
Live. A workspace for the technical documentation, section by section, saying which Annex IV points each one answers. The status table: what Complipath is.
“Generate complete Annex IV technical documentation in minutes with AI-assisted content generation.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. 'Document' module card; Starter plan and up.
Live. Drafts a documentation section from the facts in your register, and says which limbs it could not answer. The status table: what Complipath is.
“Learn how to generate, review, and export Annex IV technical documentation using Aikraft's AI copilot.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Docs index 'Documentation Generator'; pricing lists 'AI-assisted Documentation Generator' from Starter; the pages we read do not name the model that drafts them.
Live. Two features. 'DPIA and FRIA: whether they apply' says for each confirmed system whether a fundamental rights impact assessment is required, likely or not, quoting Article 27(1). 'DPIA and FRIA documents', in the app's words, drafts the FRIA (Article 27(1)) from your register by rules, built on the DPIA, a source on every sentence, for a named person to confirm with a date: a Growth feature, included in Starter until Growth launches, live since 9 October 2026. The status table: what Complipath is.
“The Fundamental Rights Impact Assessment opens as a versioned draft: six required sections, a rights register, sign-off tracking, and slots for the Article 27(3) notification record and the linked DPIA.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Walkthrough screen 04.
Growth, opens at launch. Growth, opens at launch: For a provider of a high-risk system: drafts of the EU declaration of conformity (Article 47, Annex V), the EU database registration (Article 49, Annex VIII), the post-market monitoring plan (Article 72), risk management (Article 9) from the risk register and the quality management system (Article 17), each point quoted from the law; a person completes and signs them The status table: what Complipath is.
Live. The whole register as a spreadsheet, as JSON or as a PDF, with the exact law texts it was assessed against. The status table: what Complipath is.
“You review, edit, and export audit-ready PDFs.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. End of 'How it works' step 03; 'Audit-ready PDF Export' from Starter.
Live. Upload a file once. We read it and use it everywhere it helps: proof for requirements, text for the documentation, and a flag when it disagrees with an earlier answer. The status table: what Complipath is.
“Conformity-assessment evidence and EU database registration”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Provider list item; evidence linked to each requirement is not described.
Live. Shows who did what in the workspace, and when, as a list you can read and export. The status table: what Complipath is.
“Every system gets a permanent audit trail from day one.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. 'How it works' step 01.
Yes. Confirming a classification stamps it with the person who confirmed it and when; a documentation section is marked reviewed by a named person on a date. Source.
“The Fundamental Rights Impact Assessment opens as a versioned draft: six required sections, a rights register, sign-off tracking, and slots for the Article 27(3) notification record and the linked DPIA.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. 'sign-off tracking' is stated for the FRIA; sign-off of classifications or Annex IV documents is not stated.
Yes. Each assessment records which version of the legal text it was made against, and which provisions have been amended since. Source.
Live. One file with every classification, citation and confirmation — the one you hand to someone outside your company. The status table: what Complipath is.
“Audit-ready PDF bundles, classification reports, version snapshots, and expiring read-only links for external reviewers.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Docs index 'Exports & auditor access'.
Partly. A read-only connector (MCP) lets Claude, ChatGPT or another assistant that speaks MCP read the register, once an admin signs in to allow it or with a token your workspace creates; either can be revoked. There is no API for writing to it. Source.
“Full REST API documentation for integrating Aikraft into your MLOps pipelines, CI/CD workflows, and custom tooling.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Docs index 'API Reference'; 'API Access' on Pro and Enterprise only.
Partly. Read-only connections to GitHub, GitLab, Azure and Datadog find AI in your code and read AI use from your logs, on Starter and up; there is no connection to ML platforms. Source.
“GitHub, Slack, MLflow, Weights & Biases, Jira”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. 'Integrations' row of the pricing comparison, Pro and Enterprise; Starter has 'GitHub, Slack'.
No. Complipath does not connect to work tools.
“Connect Aikraft to Jira, Slack, Azure DevOps, GitHub, and your existing data platforms for seamless compliance workflows.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Docs index 'Integrations'.
Not stated publicly.
Yes. Upload the AI inventory template or your own sheet as an Excel (.xlsx) or CSV file of up to 200 rows, check every row in a preview and send what you import to Review. Risk levels in the file are not imported: the rules classify each system.
“Aikraft supports bulk import via CSV or direct integration with your asset register.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. 'How it works' step 01; 'Bulk import (CSV / API)' on Pro and Enterprise only.
Yes. Your workspace is stored in Frankfurt: the database in Supabase's eu-central-1 region and the app's functions in Vercel's fra1 region, read on 8 October 2026. Source.
“All plans include EU hosting (Frankfurt, Germany) and GDPR-native data handling.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Under the plans; the FAQ adds 'A few sub-processors, such as billing and transactional email, operate in the US under Standard Contractual Clauses.'.
Not stated publicly.
“Data at rest is encrypted with AES-256.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Security page 'Strong Encryption' (in transit TLS 1.3); the page is headed 'Draft — pending legal review' and 'not yet binding'.
No. Complipath is not SOC 2 certified and not ISO 27001 certified. Source.
“Formal third-party attestations (such as SOC 2 or ISO 27001)”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Security page 'Security programme'; the sentence continues on the next line 'may be pursued as the product and organisation mature.' — no certification is held, and 'may be pursued' is not a dated plan.
Live. A code from your phone after the email link. The owner can require it for everyone. The status table: what Complipath is.
No. Complipath runs only as the hosted service.
“On-premise deployment option”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Enterprise plan (Custom price) only.
Starter is €499 a month or €4,990 a year. Prices exclude VAT. Pricing.
“One system free. Ten for €199. Unlimited for €499.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Pricing headline.
Yes. Your first system is free with no end date. The check needs no account. Source.
“Free plan available forever. 14-day refund on all paid plans.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Free plan: 1 AI system, risk classification, data drift alerts, 1 team member.
No card. Full access for 30 days, then it drops to the free plan — nothing is deleted and your export keeps working. Pricing.
“We offer a full refund within 14 days of your initial purchase — no questions asked.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Pricing FAQ; a refund window, not a free trial.
Starter includes 20 AI systems. Archived systems don’t count toward your limit. Pricing.
“One system free. Ten for €199. Unlimited for €499.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Priced by number of AI systems (1, 10, unlimited).
Yes. Your first system is free with no end date. You pay for your AI portfolio, not your number of employees. Source.
“We offer special pricing for registered non-profits and early-stage startups (under 3 years old, fewer than 20 employees).”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Pricing FAQ; the about page (05) says 'We build for companies of 50–3,000 employees.'.
Yes. The check needs no account, and the trial needs no card. Source.
“Register an AI system and run the full EU AI Act questionnaire on the free plan.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. End of the walkthrough; the home comparison table marks 'Self-serve signup' for Aikraft.
Not stated publicly.
“Create your account, add your first AI system, and run your first EU AI Act risk assessment in under 15 minutes.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Docs index 'Getting Started'.
Not required. The check needs no account, and a walkthrough can be booked if you want one. Source.
“Contact sales”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Enterprise plan only.
Book 30 minutes and we set up your first AI systems with you. Pricing.
“Priority support and onboarding”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu. Part of the ISO 42001 Certification add-on; plans list email support (Starter), priority email (Pro), dedicated CSM (Enterprise).
Growth, opens at launch. Growth, opens at launch: Under Frameworks, beside the EU AI Act: the GDPR duties each AI system brings, quoted from the regulation, with what Complipath prepares and what stays yours, and how far your AI management is from ISO/IEC 42001, with a draft statement of applicability; readiness only, never a certificate The status table: what Complipath is.
“ISO 42001 readiness and guided audit preparation.”Aikraft, in their words and not ours. It was read on 26 October 2026 from aikraft.eu.
“Three integrated modules covering the full compliance lifecycle — from initial classification through ongoing monitoring.”Aikraft, in their words and not ours. It was read on 9 October 2026 from aikraft.eu.
The 14 pages of Aikraft's site we read, on 26 October 2026:
It is written by Complipath, so read it as ours. What keeps it checkable is the rule on both sides: each Aikraft cell is their own sentence with the page it stood on, and each Complipath cell is what our own pages say. Where a side's pages say nothing, the cell says so.
That none of the 14 pages of Aikraft's site we read on 26 October 2026 said it. It is a statement about those pages, listed below, not about the product: ask Aikraft before you rule anything out.
Start from the rows you need. Where Aikraft's own site states a requirement our pages mark as not supported, they are the closer fit on that row by what each side says publicly. For a European company that wants each classification with its article and the version of the law it used, at a public price, start with Complipath's free check.