Compare · Complipath vs Scrut Automation · Last checked 9 October 2026
Each Scrut Automation cell is a sentence from their own site, in their words and not ours, with the page it stood on; each Complipath cell is our own page or our status table. Complipath (complipath.io) is EU AI Act compliance software that classifies each AI system with the article behind the answer.
“Scrut brings AI application discovery, review, remediation, and continuous governance into a single workflow.” In their words and not ours.[75]
Prices exclude VAT. Our price is the one on the pricing page.
Counts = requirements met in full. Partly counts as half. “Not stated” counts as zero and is never guessed. Scrut Automation: 24 of 50 stated on the 20 pages we read. Complipath: 46 of 50 answered by our own pages.
Live. Every AI system you build or use, with its owner and risk class. The status table: what Complipath is.
“Bring discovered AI apps and builders into one place for security, IT, and GRC teams to review.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
Live. Every AI system you build or use, with its owner and risk class. The status table: what Complipath is.
Live. A person behind every system and every duty. The status table: what Complipath is.
Partly. The free readiness review suggests AI systems from your public web pages; a system your website does not describe is in it only if you name it. Source.
“Discover applications across supported identity and device sources, including SSO integrations such as Google Workspace and Microsoft Entra, as well as desktop discovery through supported device-management integrations or the Scrut Agent.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
Live. Groups your systems by vendor and shows which papers you hold from each, which are missing and which have expired. The status table: what Complipath is.
“Discovers your vendors and including Shadow AI, sends tailored questionnaires, validates responses, and monitors breaches continuously.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
Live. Answers go through rules in code, never a language model, so the same answers always give the same result. Rules decide. AI only drafts. A person confirms. The status table: what Complipath is.
Partly. Article 5(1), points (d), (e), (f), (g) and (h) are decided. Points (a), (b) and (c) turn on judgement and are flagged for legal review instead of being decided. Source.
Yes. A use case that appears in Annex III is high-risk under Article 6(2) unless the Article 6(3) exemption applies. Source.
Yes. If the use case appears in Annex III, Article 6(2) classifies it high-risk unless the Article 6(3) exemption applies, and profiling of natural persons blocks the exemption entirely. Source.
Partly. Which obligations follow from the role you stated is decided. Whether you are the provider or the deployer is asked, never inferred. Source.
Live. Confirming a classification creates the obligations that follow from it, each with an owner, a status and a place for evidence. The status table: what Complipath is.
Live. Each reason behind a verdict names the provision it rests on, so a reader can check it herself. The status table: what Complipath is.
Live. Each obligation carries the date it applies from, derived from where the provision sits rather than written onto the row. The status table: what Complipath is.
Live. Records who was trained on what and when, against the Article 4 duty to support AI literacy, which applies whatever your risk level. The status table: what Complipath is.
Yes. Article 50 makes some systems tell people they are dealing with AI, and a system can carry that duty and be high-risk at the same time. Source.
Live. Checks the provisions your confirmed records cite against amending acts, and emails you per affected system. The status table: what Complipath is.
Not supported. We found no support for this in what we have built. MVP searched 245 shipped source files, 44 migrations, 14 obligation templates, 15 export columns and 12 Annex IV limbs, on the article number and on the provision's own words: nothing on any of the five. The status table: what Complipath is.
Not supported. We found no support for this in what we have built. Same search, same five places: nothing. The status table: what Complipath is.
No. Complipath does not monitor AI models while they run.
“Scrut continuously checks whether discovered AI applications have been reviewed and whether restricted applications remain in use.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
Partly. Each obligation has an owner, a status and a date it applies from. When an amending act touches a provision your records cite, you get an email per affected system. Source.
“Choose treatment plans, create and track mitigation tasks with automatic reminders, require approval before risks are treated, and trace every status change.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
Live. A workspace for the technical documentation, section by section, saying which Annex IV points each one answers. The status table: what Complipath is.
Live. Drafts a documentation section from the facts in your register, and says which limbs it could not answer. The status table: what Complipath is.
“Scrut Teammates draft policies, collect evidence, detect gaps, and prepare audit packages. Your team reviews and approves.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
Not supported. The step-by-step plan lists Article 27 as a step only for systems classified under points 5(b) and 5(c) of Annex III. Article 27(1) also binds deployers that are bodies governed by public law or private entities providing public services, and the product does not ask whether you are one. Nothing carries the assessment itself. The status table: what Complipath is.
Not supported. The Annex IV documentation asks for a copy of the declaration and you upload it; the plan says to issue it when the system is ready. The declaration itself is not drafted. The status table: what Complipath is.
Live. The whole register as a spreadsheet, as JSON or as a PDF, with the exact law texts it was assessed against. The status table: what Complipath is.
“Export your register to CSV with customizable columns. Generate full PDF risk reports filtered by status and entity, with heatmap configuration and inherent vs. residual comparisons, delivered to your inbox.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
Live. Upload a file once. We read it and use it everywhere it helps: proof for requirements, text for the documentation, and a flag when it disagrees with an earlier answer. The status table: what Complipath is.
“Scrut Teammates detect evidence from your tech stack, map controls across 70+ frameworks, and flag drift the moment it happens.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
Live. Shows who did what in the workspace, and when, as a list you can read and export. The status table: what Complipath is.
“Scrut also generates audit-ready reports that include control status, evidence summaries, timestamps, and activity logs.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
Yes. Confirming a classification stamps it with the person who confirmed it and when; a documentation section is marked reviewed by a named person on a date. Source.
“Choose treatment plans, create and track mitigation tasks with automatic reminders, require approval before risks are treated, and trace every status change.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
Yes. Each assessment records which version of the legal text it was made against, and which provisions have been amended since. Source.
Live. One file with every classification, citation and confirmation — the one you hand to someone outside your company. The status table: what Complipath is.
“Scrut also generates audit-ready reports that include control status, evidence summaries, timestamps, and activity logs.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
No. Complipath has no API for customers.
“Query your compliance program from Claude, Cursor, or any MCP client, and file evidence without leaving your AI workspace via the Scrut MCP Server.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
No. Complipath does not connect to ML or engineering tools.
“Pulls evidence from AWS, GitHub, Okta, and 150+ integrations, validates freshness, and flags gaps for review.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
No. Complipath does not connect to work tools.
“Yes, Scrut Automation integrates seamlessly with Jira, AWS, and Slack, among over 80 other tools.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
Not stated publicly.
Not stated publicly.
Yes. Your workspace is stored in Frankfurt: the database in Supabase's eu-central-1 region and the app's functions in Vercel's fra1 region, read on 8 October 2026. Source.
Not stated publicly.
“We secure data in transit via TLS using HTTPS and SSL. Encryption at rest is enforced at the database level.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
No. Complipath is not SOC 2 certified and not ISO 27001 certified. Source.
“The platform is certified for ISO/IEC 27001, ISO/IEC 42001, SOC 2, ISO 27701, GDPR, and CCPA, and applies these standards across infrastructure, processes, and product features.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
Live. A code from your phone after the email link. The owner can require it for everyone. The status table: what Complipath is.
“It enforces end-to-end encryption (TLS in transit, AES-256 at rest), role-based access control, multi-factor authentication, and real-time monitoring to ensure data remains protected at all times.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
No. Complipath runs only as the hosted service.
Starter is €499 a month. Prices exclude VAT. Pricing.
“To learn more or get a custom quote, reach out to the Scrut team with your compliance requirements.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
Yes. Your first system is free with no end date. The check needs no account. Source.
No card. Full access for 30 days, then it drops to the free plan — nothing is deleted and your export keeps working. Pricing.
Starter includes 20 AI systems. Archived systems don’t count toward your limit. Pricing.
“All pricing plans include access to all core features, modules, and frameworks within the Scrut platform, with no limits or hidden charges based on users or usage.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
Yes. Your first system is free with no end date. You pay for your AI portfolio, not your number of employees. Source.
“Affordable pricing plans tailored for small teams”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
Yes. The check needs no account, and the trial needs no card. Source.
Not stated publicly.
“See impact in 30 days. Or we make it right.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
Not required. The check needs no account, and a walkthrough can be booked if you want one. Source.
“Book a Demo”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
Book 30 minutes and we set up your first AI systems with you. Pricing.
“Get our in-house compliance experts to build you an action plan, fix control gaps, and help implement the right security controls.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
Not supported. The assistant answers questions about ISO/IEC 42001 next to the AI Act. There is no mapping of its controls to the Act, and Complipath certifies nothing. The status table: what Complipath is.
“AI Governance: ISO/IEC 42001, EU AI Act”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
“Scrut brings AI application discovery, review, remediation, and continuous governance into a single workflow.”Scrut Automation, in their words and not ours. It was read on 9 October 2026 from scrut.io.
The 20 pages of Scrut Automation's site we read, on 9 October 2026:
It is written by Complipath, so read it as ours. What keeps it checkable is the rule on both sides: each Scrut Automation cell is their own sentence with the page it stood on, and each Complipath cell is what our own pages say. Where a side's pages say nothing, the cell says so.
That none of the 20 pages of Scrut Automation's site we read on 9 October 2026 said it. It is a statement about those pages, listed below, not about the product: ask Scrut Automation before you rule anything out.
Start from the rows you need. Where Scrut Automation's own site states a requirement our pages mark as not supported, they are the closer fit on that row by what each side says publicly. For a European company that wants each classification with its article and the version of the law it used, at a public price, start with Complipath's free check.