Compare · Complipath vs Atheros AI · Last checked 9 October 2026
Each Atheros AI cell is a sentence from their own site, in their words and not ours, with the page it stood on; each Complipath cell is our own page or our status table. Complipath (complipath.io) is EU AI Act compliance software that classifies each AI system with the article behind the answer.
“CI/CD Gates Block non-compliant releases before they reach production.” In their words and not ours.[76]
“After deployment it attaches drift, incident and usage telemetry to the post-market monitoring obligations, so the evidence an auditor asks for is produced by the pipeline rather than assembled by hand.” In their words and not ours.[77]
“An assurance report with nine mandatory sections, locked with a SHA-256 hash when issued; later changes go through an addendum, and a machine-readable findings package can be published back to the auditee.” In their words and not ours.[78]
“Criteria library version 1.1 covers ISO/IEC 42001 clauses 4 to 10, the EU AI Act, ISO/IEC 27001, NIST AI RMF and COSO ERM by crosswalk, and the OWASP Top 10 for LLM applications — 47 criteria, 160 clause references.” In their words and not ours.[79]
Prices exclude VAT. Our price is the one on the pricing page.
Counts = requirements met in full. Partly counts as half. “Not stated” counts as zero and is never guessed. Atheros AI: 25 of 50 stated on the 8 pages we read. Complipath: 46 of 50 answered by our own pages.
Live. Every AI system you build or use, with its owner and risk class The status table: what Complipath is.
“AI system inventory and gap analysis”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com. Listed under their consultancy service.
Live. Every AI system you build or use, with its owner and risk class The status table: what Complipath is.
Live. A person behind every system and every duty The status table: what Complipath is.
Partly. The free readiness review suggests AI systems from your public web pages; a system your website does not describe is in it only if you name it. Source.
Live. An AI tool you buy is registered and classified like one you build, with the obligations of a deployer and the AI literacy record. There is no vendor questionnaire and no contract review. The status table: what Complipath is.
Live. Answers go through rules in code, never a language model, so the same answers always give the same result. Rules decide. AI only drafts. A person confirms. The status table: what Complipath is.
“Risk Classifier Assigns EU AI Act tiers based on use case and data flows.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
Partly. Article 5(1), points (d), (e), (f), (g) and (h) are decided. Points (a), (b) and (c) turn on judgement and are flagged for legal review instead of being decided. Source.
Yes. A use case that appears in Annex III is high-risk under Article 6(2) unless the Article 6(3) exemption applies. Source.
Yes. If the use case appears in Annex III, Article 6(2) classifies it high-risk unless the Article 6(3) exemption applies, and profiling of natural persons blocks the exemption entirely. Source.
Partly. Which obligations follow from the role you stated is decided. Whether you are the provider or the deployer is asked, never inferred. Source.
Live. Confirming a classification creates the obligations that follow from it, each with an owner, a status and a place for evidence The status table: what Complipath is.
Live. Each reason behind a verdict names the provision it rests on, so a reader can check it herself The status table: what Complipath is.
Live. Each obligation carries the date it applies from, derived from where the provision sits rather than written onto the row The status table: what Complipath is.
Live. Records who was trained on what and when, against the Article 4 duty to support AI literacy, which applies whatever your risk level The status table: what Complipath is.
“Role-based tracks for executives, technical teams and the wider workforce, delivered by PhD-level practitioners — including the Article 4 AI literacy duty.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com. Their training offer.
Yes. Article 50 makes some systems tell people they are dealing with AI, and a system can carry that duty and be high-risk at the same time. Source.
“Article 50 Transparency Pack”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com. The name of a one-off pack on their product page.
Live. Checks the provisions your confirmed records cite against amending acts, and emails you per affected system The status table: what Complipath is.
Not supported. We found no support for this in what we have built. MVP searched 245 shipped source files, 44 migrations, 14 obligation templates, 15 export columns and 12 Annex IV limbs, on the article number and on the provision's own words: nothing on any of the five. The status table: what Complipath is.
“Post-Market Monitoring Drift, incident, and usage telemetry tied to your obligations.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
Not supported. We found no support for this in what we have built. Same search, same five places: nothing. The status table: what Complipath is.
No. Complipath does not monitor AI models while they run.
“Drift and incident monitoring”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
Partly. Each obligation has an owner, a status and a date it applies from. When an amending act touches a provision your records cite, you get an email per affected system. Source.
“Management’s response recorded per finding; corrective and preventive actions tracked to closure”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com. In internal-audit engagements.
Live. A workspace for the technical documentation, section by section, saying which Annex IV points each one answers The status table: what Complipath is.
“Annex IV Automation Generates and maintains the technical file with every model version.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
Live. Drafts a documentation section from the facts in your register, and says which limbs it could not answer The status table: what Complipath is.
Not supported. The step-by-step plan lists Article 27 as a step only for systems classified under points 5(b) and 5(c) of Annex III. Article 27(1) also binds deployers that are bodies governed by public law or private entities providing public services, and the product does not ask whether you are one. Nothing carries the assessment itself. The status table: what Complipath is.
Not supported. The Annex IV documentation asks for a copy of the declaration and you upload it; the plan says to issue it when the system is ready. The declaration itself is not drafted. The status table: what Complipath is.
Live. The whole register as a spreadsheet, as JSON or as a PDF, with the exact law texts it was assessed against The status table: what Complipath is.
“An internal audit communication to the board — findings, root cause and agreed actions — exported as a locked working-papers file with its evidence log.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
Live. A file linked to the requirements it proves, with the passage and its page The status table: what Complipath is.
“A number hides missing evidence inside an average; the platform shows which criterion, at which level, and why.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
Live. Who did what, and when. No one can edit or delete a line, an owner included; only deleting the whole workspace removes it The status table: what Complipath is.
“The auditee accepts a versioned retention consent at grant time and can see a read-log — who read the granted system, when, with personal-data reads flagged.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com. About access granted to an auditor.
Yes. Confirming a classification stamps it with the person who confirmed it and when; a documentation section is marked reviewed by a named person on a date. Source.
“Release gated until checks pass or a reviewer signs off.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
Yes. Each assessment records which version of the legal text it was made against, and which provisions have been amended since. Source.
“We version the regulatory content our assessments run against and date every deliverable, so you can always tell which text a conclusion was reached under.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
In progress. One file for an auditor: every system, its classification, evidence, the audit log and a fingerprint. Not available yet. The status table: what Complipath is.
“The platform produces the evidence and the report those processes rely on.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
No. Complipath has no API for customers.
No. Complipath does not connect to ML or engineering tools.
“It runs as a stage in the pipeline you already have — GitHub Actions, GitLab CI or an equivalent — and reads model and dataset metadata from the repository and registry rather than replacing them.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
No. Complipath does not connect to work tools.
Not stated publicly.
“Internal-audit and independent-audit workflows on the same evidence base, unlimited seats, SSO, EU data residency with your own keys.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com. On the enterprise plan.
Not stated publicly.
Yes. Your workspace is stored in Frankfurt: the database in Supabase's eu-central-1 region and the app's functions in Vercel's fra1 region, read on 8 October 2026. Source.
“ComplianceEngine runs on EU-hosted infrastructure or inside your own environment.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
Not stated publicly.
No. Complipath is not SOC 2 certified and not ISO 27001 certified. Source.
Live. A code from your phone after the email link, which the owner can require for everyone The status table: what Complipath is.
No. Complipath runs only as the hosted service.
“ComplianceEngine runs on EU-hosted infrastructure or inside your own cloud or on-premise environment; customer data does not leave the EU unless you deploy it elsewhere yourself.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
Starter is €499 a month. Prices exclude VAT. Pricing.
“Free for one system, from €290 per month.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
Yes. Your first system is free with no end date. The check needs no account. Source.
“Explore is free for one AI system with no time limit.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
No card. Full access for 30 days, then it drops to the free plan — nothing is deleted and your export keeps working. Pricing.
Starter includes 20 AI systems. Archived systems don’t count toward your limit. Pricing.
“Atheros AI prices the platform per managed AI system and the developer kit per developer.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
Yes. Your first system is free with no end date. You pay for your AI portfolio, not your number of employees. Source.
Yes. The check needs no account, and the trial needs no card. Source.
“Start free — classify one system”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com. A button label.
Not stated publicly.
“Our 30-minute classification call does this with you and leaves you with a written memo of the tiers and the reasoning, whether or not you engage us afterwards.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com. About their advisory call.
Not required. The check needs no account, and a walkthrough can be booked if you want one. Source.
“Request a Demo”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com. A button label.
Book 30 minutes and we set up your first AI systems with you. Pricing.
Not supported. The assistant answers questions about ISO/IEC 42001 next to the AI Act. There is no mapping of its controls to the Act, and Complipath certifies nothing. The status table: what Complipath is.
“Criteria library version 1.1 covers ISO/IEC 42001 clauses 4 to 10, the EU AI Act, ISO/IEC 27001, NIST AI RMF and COSO ERM by crosswalk, and the OWASP Top 10 for LLM applications — 47 criteria, 160 clause references.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
“CI/CD Gates Block non-compliant releases before they reach production.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
“After deployment it attaches drift, incident and usage telemetry to the post-market monitoring obligations, so the evidence an auditor asks for is produced by the pipeline rather than assembled by hand.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
“An assurance report with nine mandatory sections, locked with a SHA-256 hash when issued; later changes go through an addendum, and a machine-readable findings package can be published back to the auditee.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
“Criteria library version 1.1 covers ISO/IEC 42001 clauses 4 to 10, the EU AI Act, ISO/IEC 27001, NIST AI RMF and COSO ERM by crosswalk, and the OWASP Top 10 for LLM applications — 47 criteria, 160 clause references.”Atheros AI, in their words and not ours. It was read on 9 October 2026 from atherosai.com.
The 8 pages of Atheros AI's site we read, on 9 October 2026:
It is written by Complipath, so read it as ours. What keeps it checkable is the rule on both sides: each Atheros AI cell is their own sentence with the page it stood on, and each Complipath cell is what our own pages say. Where a side's pages say nothing, the cell says so.
That none of the 8 pages of Atheros AI's site we read on 9 October 2026 said it. It is a statement about those pages, listed below, not about the product: ask Atheros AI before you rule anything out.
Start from the rows you need. Where Atheros AI's own site states a requirement our pages mark as not supported, they are the closer fit on that row by what each side says publicly. For a European company that wants each classification with its article and the version of the law it used, at a public price, start with Complipath's free check.