Compare · Complipath vs UNAIT · Last checked 22 October 2026
Each UNAIT cell is a sentence from their own site, in their words and not ours, with the page it stood on; each Complipath cell is our own page or our status table. Complipath (complipath.io) is EU AI Act compliance software that classifies each AI system with the article behind the answer.
Price. Not comparable: UNAIT's pages state no price; its solutions page, which was read on 22 October 2026, says an individual quote is "Tailored to the size of your organisation" and the quote is requested by form, so we cannot say whether it is cheaper than Complipath Starter at €499 a month.
Prices exclude VAT.
“Classification follows a fixed decision logic. It was written by people on the basis of the core legal texts and reviewed by a law firm.” In their words and not ours.[82]
“41 document templates for every role and risk class” In their words and not ours.[83]
“The software runs exclusively in a data centre in Germany.” In their words and not ours.[84]
Prices exclude VAT. Our price is the one on the pricing page.
Counts = requirements met in full. Partly counts as half. “Not stated” counts as zero and is never guessed. UNAIT: 31 of 50 stated on the 12 pages we read. Complipath: 47 of 50 answered by our own pages.
Live. Every AI system you build or use, with its owner and risk class. The status table: what Complipath is.
“Central AI inventory Every reported and reviewed AI application is brought together in one place, with status, assessment, responsibilities and evidence.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. Under "UNAIT Compliance"; the cheaper entry product, the Risk Tool, is described as for organisations that "wish to record and document individual AI systems systematically".
Live. Every AI system you build or use, with its owner and risk class. The status table: what Complipath is.
Live. A person behind every system and every duty. The status table: what Complipath is.
“Who gains or loses a responsibility, and who approves, is recorded with person and date.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. In the ISO/IEC 42001 mapping, next to "a named team per case"; one named owner per system is not stated as such.
Partly. A read-only GitHub or GitLab connection finds AI libraries, calls to AI services and AI key names in the repositories you choose and suggests them for the register, where a person adds them; the free readiness review suggests systems from your public web pages. Source.
With limits. Groups your systems by vendor and shows which papers you hold from each, which are missing and which have expired; for the AI vendors it knows it links the public terms and, where known, the data processing agreement; it quotes a sentence on personal data or training where one was found, with its link and the day read; each quoted page is read again once a month, and a sentence no longer on its page stops showing. The status table: what Complipath is.
Live. Answers go through rules in code, never a language model, so the same answers always give the same result. Rules decide. AI only drafts. A person confirms. The status table: what Complipath is.
“UNAIT classifies every AI application automatically under the EU AI Act, from minimal risk to prohibited, and sets out the resulting obligations by article and annex.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. The page also says "Classification follows a fixed decision logic." (rule-based, not model-based).
Partly. Article 5(1), points (d), (e), (f), (g) and (h) are decided. Points (a), (b) and (c) turn on judgement and are flagged for legal review instead of being decided. Source.
“Check for prohibited AI practices Art. 5”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. An entry in the list of 41 document templates, under "Special cases and exemptions"; the home page also says classification runs "from minimal risk to prohibited".
Yes. A use case that appears in Annex III is high-risk under Article 6(2) unless the Article 6(3) exemption applies. Source.
“The system falls under Annex III of the EU AI Act (employment decisions) and therefore counts as high-risk.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. Text of a sample result drawn inside the page's picture of the product, which shows "Annex III · point 4(b)".
Yes. If the use case appears in Annex III, Article 6(2) classifies it high-risk unless the Article 6(3) exemption applies, and profiling of natural persons blocks the exemption entirely. Source.
“Documentation of a possible exemption Art. 6 (3)”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. An entry in the list of document templates; whether the classification itself checks the exemption is not stated on the pages we read.
Partly. Which obligations follow from the role you stated is decided. Whether you are the provider or the deployer is asked, never inferred. Source.
“The tool supports the classification of the relevant roles (provider, deployer and so on), risk classes and legal obligations, based on structured decision logic.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. Describing the Risk Tool.
With limits. Confirming a classification creates the obligations that follow from it, each with a status, a place for evidence and an owner you fill in, and high-risk rows need the system's role recorded. A later, stricter classification adds no new duties unless you change the system's type or role. The status table: what Complipath is.
“UNAIT classifies every AI application automatically under the EU AI Act, from minimal risk to prohibited, and sets out the resulting obligations by article and annex.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de.
Live. Each reason behind a verdict names the provision it rests on, so a reader can check it herself. The status table: what Complipath is.
“UNAIT classifies every AI application automatically under the EU AI Act, from minimal risk to prohibited, and sets out the resulting obligations by article and annex.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. The sample result on the same page lists "Article 9 – risk management" and "Article 13 – transparency".
Live. Each obligation carries the date it applies from, derived from where the provision sits rather than written onto the row. The status table: what Complipath is.
Live. Records the measures you take to support AI literacy under Article 4 as amended: who was briefed on what, and when. It applies whatever your risk level. The status table: what Complipath is.
“AI literacy records Art. 4”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. An entry in the list of document templates (a record, not training); the home page says "UNAIT does not offer training on AI literacy." and names another company that does.
Yes. Article 50 makes some systems tell people they are dealing with AI, and a system can carry that duty and be high-risk at the same time. Source.
“Transparency and marking Art. 50”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. An entry in the list of document templates, under risk management and technical foundations.
Live. Checks the provisions your confirmed records cite against amending acts, and emails everyone in the workspace once per act, naming each system it touches. The status table: what Complipath is.
Not supported. We found no support for this in what we have built. MVP searched 245 shipped source files, 44 migrations, 14 obligation templates, 15 export columns and 12 Annex IV limbs, on the article number and on the provision's own words: nothing on any of the five. The status table: what Complipath is.
“Post-market monitoring plan Art. 72”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. An entry in the list of document templates, under conformity, registration and market surveillance.
Live. Serious incidents, in the app's own words: it logs what went wrong with an AI system and shows the date a serious incident must be reported by and who is told, from Articles 73, 26(5) and 75(1a) as written; a person decides, and the owner is reminded. A Growth feature, included in Starter until Growth launches, live since 9 October 2026. The status table: what Complipath is.
“Serious incident report to the market surveillance authority Art. 73”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. An entry in the list of document templates, under conformity, registration and market surveillance.
Partly. Complipath does not test models or watch their outputs; a connected Datadog account shows, from your logs, how often each AI service was called and its error rate. Source.
Partly. Each obligation has an owner, a status and a date it applies from. When an amending act touches a provision your records cite, you get an email per affected system. Source.
“Governance processes: clear approval paths and responsibilities”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. Approval paths; tasks and reminders are not stated on the pages we read.
Live. A workspace for the technical documentation, section by section, saying which Annex IV points each one answers. The status table: what Complipath is.
“Technical documentation Art. 11”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. An entry in the list of document templates; Annex IV is not named on the pages we read.
Live. Drafts a documentation section from the facts in your register, and says which limbs it could not answer. The status table: what Complipath is.
Live. Two features. 'DPIA and FRIA: whether they apply' says for each confirmed system whether a fundamental rights impact assessment is required, likely or not, quoting Article 27(1). 'DPIA and FRIA documents', in the app's words, drafts the FRIA (Article 27(1)) from your register by rules, built on the DPIA, a source on every sentence, for a named person to confirm with a date: a Growth feature, included in Starter until Growth launches, live since 9 October 2026. The status table: what Complipath is.
“Fundamental rights impact assessment (FRIA) Art. 27”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. An entry in the list of document templates, under data protection.
Not supported. The Annex IV documentation asks for a copy of the declaration and you upload it; the plan says to issue it when the system is ready. The declaration itself is not drafted. The status table: what Complipath is.
“EU declaration of conformity Art. 47”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. An entry in the list of document templates, under conformity, registration and market surveillance.
Live. The whole register as a spreadsheet, as JSON or as a PDF, with the exact law texts it was assessed against. The status table: what Complipath is.
“One click produces a complete PDF audit report: for audits, requests from authorities and internal evidence.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. A PDF audit report; other export formats are not stated on the pages we read.
Live. Upload a file once. We read it and use it everywhere it helps: proof for requirements, text for the documentation, and a flag when it disagrees with an earlier answer. The status table: what Complipath is.
“UNAIT is the browser-based platform organisations use to record their AI applications, classify risks under the EU AI Act and document every obligation with verifiable evidence.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de.
Live. Shows who did what in the workspace, and when, as a list you can read and export. The status table: what Complipath is.
“In UNAIT: an audit log and a full audit report as a PDF at the touch of a button.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. The same page lists what is logged: "creation, submission, approval, status changes, changes to the risk class, changes to entries, report exports and the arrival and departure of team members".
Yes. Confirming a classification stamps it with the person who confirmed it and when; a documentation section is marked reviewed by a named person on a date. Source.
“Review and approval processes AI cases are steered through clear roles, responsibilities and decision steps instead of email, spreadsheets and informal agreement.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. Under "UNAIT Compliance".
Yes. Each assessment records which version of the legal text it was made against, and which provisions have been amended since. Source.
Live. One file with every classification, citation and confirmation — the one you hand to someone outside your company. The status table: what Complipath is.
“Audit-ready documentation Assessments, decisions and evidence are filed systematically and made available for data protection, internal audit, funding bodies or internal reviews.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. Under "UNAIT Compliance".
Partly. A read-only connector (MCP) lets Claude, ChatGPT or another assistant that speaks MCP read the register, once an admin signs in to allow it or with a token your workspace creates; either can be revoked. There is no API for writing to it. Source.
Partly. Read-only connections to GitHub, GitLab, Azure and Datadog find AI in your code and read AI use from your logs, on Starter and up; there is no connection to ML platforms. Source.
No. Complipath does not connect to work tools.
Not stated publicly.
Yes. Upload the AI inventory template or your own sheet as an Excel (.xlsx) or CSV file of up to 200 rows, check every row in a preview and send what you import to Review. Risk levels in the file are not imported: the rules classify each system.
Yes. Your workspace is stored in Frankfurt: the database in Supabase's eu-central-1 region and the app's functions in Vercel's fra1 region, read on 8 October 2026. Source.
“All data is stored and processed exclusively in Germany, in a data centre with TÜV certification to DIN ISO 27001. No transfer to third countries.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. Answer to "Where is the data stored?"
Not stated publicly.
No. Complipath is not SOC 2 certified and not ISO 27001 certified. Source.
“Certification to DIN ISO 27001 applies to the operator of the data centre in which UNAIT runs.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. The page says the certification is the data-centre operator's and "should not be confused with ISO/IEC 42001"; the page also says "UNAIT is not a certification body."; a certification of UNAIT GmbH itself or a SOC 2 report is not stated on the pages we read.
Live. A code from your phone after the email link. The owner can require it for everyone. The status table: what Complipath is.
No. Complipath runs only as the hosted service.
Starter is €499 a month. Prices exclude VAT. Pricing.
Yes. Your first system is free with no end date. The check needs no account. Source.
“The Governance Quick-Check shows you where your organisation stands today, in about 15 minutes. Free of charge and without registration.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. A free self-check, not a free plan of the software.
No card. Full access for 30 days, then it drops to the free plan — nothing is deleted and your export keeps working. Pricing.
“Request your trial access. We set it up and you try the full version, with no payment details and no obligation.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. Step 01 of "A governance structure in four steps"; the trial is requested and set up by UNAIT, and the trial form says it "ends automatically".
Starter includes 20 AI systems. Archived systems don’t count toward your limit. Pricing.
“Individual quote Tailored to the size of your organisation, with terms, data processing agreement and security concept for your internal review.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. States the basis (organisation size), not an amount.
Yes. Your first system is free with no end date. You pay for your AI portfolio, not your number of employees. Source.
“UNAIT suits public institutions and companies, authorities and organisations that want to use AI in a structured and secure way, regardless of size or sector.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. Answer to "Which organisations is UNAIT suitable for?"; no plan is described as made for small companies on the pages we read.
Yes. The check needs no account, and the trial needs no card. Source.
Not stated publicly.
“UNAIT is web-based and productive within days rather than months.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. Under "A simple start"; the solutions page answers "When can I start?" with "You can start within a few days".
Not required. The check needs no account, and a walkthrough can be booked if you want one. Source.
Book 30 minutes and we set up your first AI systems with you. Pricing.
“Personal onboarding We accompany the roll-out in your organisation, with no complex IT installation.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de.
Not supported. The assistant answers questions about ISO/IEC 42001 next to the AI Act. There is no mapping of its controls to the Act, and Complipath certifies nothing. The status table: what Complipath is.
“Yes, with the preparation. The free Governance Quick-Check shows you across seven areas where your organisation stands today, and the documentation produced in UNAIT covers a considerable part of the required evidence.”UNAIT, in their words and not ours. It was read on 22 October 2026 from unait.de. Answer to "Does UNAIT help with ISO/IEC 42001?"; NIST AI RMF is not named on the pages we read.
“Classification follows a fixed decision logic. It was written by people on the basis of the core legal texts and reviewed by a law firm.”UNAIT, in their words and not ours. It was read on 9 October 2026 from unait.de.
“41 document templates for every role and risk class”UNAIT, in their words and not ours. It was read on 9 October 2026 from unait.de.
“The software runs exclusively in a data centre in Germany.”UNAIT, in their words and not ours. It was read on 9 October 2026 from unait.de.
The 12 pages of UNAIT's site we read, on 22 October 2026:
It is written by Complipath, so read it as ours. What keeps it checkable is the rule on both sides: each UNAIT cell is their own sentence with the page it stood on, and each Complipath cell is what our own pages say. Where a side's pages say nothing, the cell says so.
That none of the 12 pages of UNAIT's site we read on 22 October 2026 said it. It is a statement about those pages, listed below, not about the product: ask UNAIT before you rule anything out.
Start from the rows you need. Where UNAIT's own site states a requirement our pages mark as not supported, they are the closer fit on that row by what each side says publicly. For a European company that wants each classification with its article and the version of the law it used, at a public price, start with Complipath's free check.