Compare · Complipath vs Veillo · Last checked 22 October 2026
Each Veillo cell is a sentence from their own site, in their words and not ours, with the page it stood on; each Complipath cell is our own page or our status table. Complipath (complipath.io) is EU AI Act compliance software that classifies each AI system with the article behind the answer.
Price. Veillo is cheaper: its own page says Evidence is € 149 a month (up to 10 AI systems, 1 user) and its second plan € 349 a month (up to 50 systems, 5 users), "Prices exclude VAT", against Complipath Starter at €499 a month excl. VAT, which is €350 more than their Evidence plan (€499 - €149) and €150 more than that plan (€499 - €349); the annual price is not stated as an amount, only "save ~2 months".
Prices exclude VAT.
“Veillo keeps one reviewable record of the AI your business uses, who owns it, why it is approved, how it is classified, and the evidence behind it.” In their words and not ours.[87]
“Where content is still pending counsel review, we mark it plainly. We would rather show you the seams than pretend they are not there.” In their words and not ours.[88]
“Veillo already knows the common AI tools, from ChatGPT to HireVue, so your inventory starts mostly filled in.” In their words and not ours.[89]
“Inventory your AI in five minutes. List the AI tools you use, tell us what you use them for, and get a classified AI Inventory Register you can download as a PDF.” In their words and not ours.[90]
Prices exclude VAT. Our price is the one on the pricing page.
Counts = requirements met in full. Partly counts as half. “Not stated” counts as zero and is never guessed. Veillo: 36 of 50 stated on the 24 pages we read. Complipath: 47 of 50 answered by our own pages.
Live. Every AI system you build or use, with its owner and risk class. The status table: what Complipath is.
“Veillo keeps one reviewable record of the AI your business uses, who owns it, why it is approved, how it is classified, and the evidence behind it.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Live. Every AI system you build or use, with its owner and risk class. The status table: what Complipath is.
“Pick from a pre-built library, grouped by category, with brand logos so they are easy to spot. Add custom-built systems in free text; the classifier reads the description.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Live. A person behind every system and every duty. The status table: what Complipath is.
“Give every system a purpose, owner, and review state so the register can become an operating record.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Partly. A read-only GitHub or GitLab connection finds AI libraries, calls to AI services and AI key names in the repositories you choose and suggests them for the register, where a person adds them; the free readiness review suggests systems from your public web pages. Source.
“It is in private beta. The flow and the review queue are built; the live connectors to each provider are rolling out.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
With limits. Groups your systems by vendor and shows which papers you hold from each, which are missing and which have expired; for the AI vendors it knows it links the public terms and, where known, the data processing agreement; it quotes a sentence on personal data or training where one was found, with its link and the day read; each quoted page is read again once a month, and a sentence no longer on its page stops showing. The status table: what Complipath is.
Live. Answers go through rules in code, never a language model, so the same answers always give the same result. Rules decide. AI only drafts. A person confirms. The status table: what Complipath is.
“Veillo maps each use case to a risk tier with reviewed reasoning and keeps the human confirmation attached.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Partly. Article 5(1), points (d), (e), (f), (g) and (h) are decided. Points (a), (b) and (c) turn on judgement and are flagged for legal review instead of being decided. Source.
“Prohibited, high-risk, limited, or minimal, with the Annex III reference.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Yes. A use case that appears in Annex III is high-risk under Article 6(2) unless the Article 6(3) exemption applies. Source.
“AI inventory and Annex III classification”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Yes. If the use case appears in Annex III, Article 6(2) classifies it high-risk unless the Article 6(3) exemption applies, and profiling of natural persons blocks the exemption entirely. Source.
Partly. Which obligations follow from the role you stated is decided. Whether you are the provider or the deployer is asked, never inferred. Source.
“Veillo is built for deployers.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
With limits. Confirming a classification creates the obligations that follow from it, each with a status, a place for evidence and an owner you fill in, and high-risk rows need the system's role recorded. A later, stricter classification adds no new duties unless you change the system's type or role. The status table: what Complipath is.
“Built from your real inventory: add a high-risk tool and its duties appear, with the deadline attached.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Live. Each reason behind a verdict names the provision it rests on, so a reader can check it herself. The status table: what Complipath is.
“Keep the system's logs Article 26 To do Fundamental rights assessment Article 27 Review Illustrative. The duties shown are derived from your classified inventory.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Live. Each obligation carries the date it applies from, derived from where the provision sits rather than written onto the row. The status table: what Complipath is.
“Built from your real inventory: add a high-risk tool and its duties appear, with the deadline attached.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Live. Records the measures you take to support AI literacy under Article 4 as amended: who was briefed on what, and when. It applies whatever your risk level. The status table: what Complipath is.
“Article 4 AI Literacy Policy The baseline training and awareness your staff need to use AI responsibly.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Yes. Article 50 makes some systems tell people they are dealing with AI, and a system can carry that duty and be high-risk at the same time. Source.
“Article 50 Transparency Disclosures Chatbot notices, AI-content labelling, and automated-decision explanations.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Live. Checks the provisions your confirmed records cite against amending acts, and emails everyone in the workspace once per act, naming each system it touches. The status table: what Complipath is.
“Regulator updates from the AI Office and national authorities, flagged to the documents they affect.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Not supported. We found no support for this in what we have built. MVP searched 245 shipped source files, 44 migrations, 14 obligation templates, 15 export columns and 12 Annex IV limbs, on the article number and on the provision's own words: nothing on any of the five. The status table: what Complipath is.
Live. Serious incidents, in the app's own words: it logs what went wrong with an AI system and shows the date a serious incident must be reported by and who is told, from Articles 73, 26(5) and 75(1a) as written; a person decides, and the owner is reminded. A Growth feature, included in Starter until Growth launches, live since 9 October 2026. The status table: what Complipath is.
“Article 73 Incident Response Procedure How a serious incident is logged, escalated, and reported.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Partly. Complipath does not test models or watch their outputs; a connected Datadog account shows, from your logs, how often each AI service was called and its error rate. Source.
Partly. Each obligation has an owner, a status and a date it applies from. When an amending act touches a provision your records cite, you get an email per affected system. Source.
“III. A roadmap to follow Turn confirmed classifications into actions, responsibilities, and review dates instead of leaving the answer buried in a report.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Live. A workspace for the technical documentation, section by section, saying which Annex IV points each one answers. The status table: what Complipath is.
“Annex IV Technical Memo The technical documentation a high-risk system has to keep on file.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Live. Drafts a documentation section from the facts in your register, and says which limbs it could not answer. The status table: what Complipath is.
Live. Two features. 'DPIA and FRIA: whether they apply' says for each confirmed system whether a fundamental rights impact assessment is required, likely or not, quoting Article 27(1). 'DPIA and FRIA documents', in the app's words, drafts the FRIA (Article 27(1)) from your register by rules, built on the DPIA, a source on every sentence, for a named person to confirm with a date: a Growth feature, included in Starter until Growth launches, live since 9 October 2026. The status table: what Complipath is.
“Duties that bind only some deployers, like a fundamental rights assessment, are flagged for you to confirm, never assumed.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Not supported. The Annex IV documentation asks for a copy of the declaration and you upload it; the plan says to issue it when the system is ready. The declaration itself is not drafted. The status table: what Complipath is.
Live. The whole register as a spreadsheet, as JSON or as a PDF, with the exact law texts it was assessed against. The status table: what Complipath is.
“Edit in a rich text editor, then export to PDF or DOCX.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Live. Upload a file once. We read it and use it everywhere it helps: proof for requirements, text for the documentation, and a flag when it disagrees with an earlier answer. The status table: what Complipath is.
“Evidence with context Generate editable work products from your inventory, keep every version, and show which content has been reviewed or still needs judgment.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Live. Shows who did what in the workspace, and when, as a list you can read and export. The status table: what Complipath is.
“Material product actions create separate audit rows with actor, time, entity, action, and summary data.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Yes. Confirming a classification stamps it with the person who confirmed it and when; a documentation section is marked reviewed by a named person on a date. Source.
“A high-risk result never confirms itself. It routes to a person to sign off.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Yes. Each assessment records which version of the legal text it was made against, and which provisions have been amended since. Source.
Live. One file with every classification, citation and confirmation — the one you hand to someone outside your company. The status table: what Complipath is.
“Your register exports to PDF, your documents to PDF and DOCX, and your audit log to CSV, at any time. The point of the product is to give you a portable, audit-ready record, not to trap it.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Partly. A read-only connector (MCP) lets Claude, ChatGPT or another assistant that speaks MCP read the register, once an admin signs in to allow it or with a token your workspace creates; either can be revoked. There is no API for writing to it. Source.
“API access – – – ✓”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Partly. Read-only connections to GitHub, GitLab, Azure and Datadog find AI in your code and read AI use from your logs, on Starter and up; there is no connection to ML platforms. Source.
No. Complipath does not connect to work tools.
“Link Google Workspace, Microsoft Entra, or Okta for sign-ins and app grants. Link Pleo or Spendesk for AI bought on company cards. Read-only, in a few clicks.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Not stated publicly.
“Assured Custom For higher-stakes and multi-entity programmes. Custom scope and support · Everything in Governance · SSO · Audit log export · Multi-entity · Priority support”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Yes. Upload the AI inventory template or your own sheet as an Excel (.xlsx) or CSV file of up to 200 rows, check every row in a preview and send what you import to Review. Risk levels in the file are not imported: the rules classify each system.
Yes. Your workspace is stored in Frankfurt: the database in Supabase's eu-central-1 region and the app's functions in Vercel's fra1 region, read on 8 October 2026. Source.
“pinned to the Frankfurt region through fra1 . The production database standard is an EU region and must be verified in the database-provider console before launch and after migrations.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Not stated publicly.
“Traffic uses HTTPS in production. Google connector refresh tokens are encrypted with a deployment secret before database storage.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
No. Complipath is not SOC 2 certified and not ISO 27001 certified. Source.
Live. A code from your phone after the email link. The owner can require it for everyone. The status table: what Complipath is.
No. Complipath runs only as the hosted service.
Starter is €499 a month. Prices exclude VAT. Pricing.
“Evidence € 149 / mo Build a defensible AI governance record. Up to 10 AI systems · single workspace”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Yes. Your first system is free with no end date. The check needs no account. Source.
“There is no permanent free plan. You can use the free inventory tool with no signup, and start a 14-day trial of Governance with no card.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
No card. Full access for 30 days, then it drops to the free plan — nothing is deleted and your export keeps working. Pricing.
“14-day free trial of Governance, no card required.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Starter includes 20 AI systems. Archived systems don’t count toward your limit. Pricing.
“What counts as an AI system? Each tool-and-use you add to your register counts as one system. Your plan sets how many you can track.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Yes. Your first system is free with no end date. You pay for your AI portfolio, not your number of employees. Source.
“Veillo is priced for SMBs and starts from the tools you already use, so a micro-business can get to an audit-ready posture without hiring anyone.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Yes. The check needs no account, and the trial needs no card. Source.
“Run the free inventory with no signup, or start the 14-day Governance trial with no card.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Not stated publicly.
“You can run the free, no-signup inventory tool in about five minutes and download a classified register. In a trial workspace, most teams reach their first generated document within an hour.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu.
Not required. The check needs no account, and a walkthrough can be booked if you want one. Source.
Book 30 minutes and we set up your first AI systems with you. Pricing.
“Guided implementation Start with a structured working session.”Veillo, in their words and not ours. It was read on 22 October 2026 from veillo.eu. The same card gives a price "excluding VAT" and says "We help scope the inventory, assign owners, and establish the first review cycle."
Not supported. The assistant answers questions about ISO/IEC 42001 next to the AI Act. There is no mapping of its controls to the Act, and Complipath certifies nothing. The status table: what Complipath is.
“Veillo keeps one reviewable record of the AI your business uses, who owns it, why it is approved, how it is classified, and the evidence behind it.”Veillo, in their words and not ours. It was read on 9 October 2026 from veillo.eu.
“Where content is still pending counsel review, we mark it plainly. We would rather show you the seams than pretend they are not there.”Veillo, in their words and not ours. It was read on 9 October 2026 from veillo.eu.
“Veillo already knows the common AI tools, from ChatGPT to HireVue, so your inventory starts mostly filled in.”Veillo, in their words and not ours. It was read on 9 October 2026 from veillo.eu.
“Inventory your AI in five minutes. List the AI tools you use, tell us what you use them for, and get a classified AI Inventory Register you can download as a PDF.”Veillo, in their words and not ours. It was read on 9 October 2026 from veillo.eu.
The 24 pages of Veillo's site we read, on 22 October 2026:
It is written by Complipath, so read it as ours. What keeps it checkable is the rule on both sides: each Veillo cell is their own sentence with the page it stood on, and each Complipath cell is what our own pages say. Where a side's pages say nothing, the cell says so.
That none of the 24 pages of Veillo's site we read on 22 October 2026 said it. It is a statement about those pages, listed below, not about the product: ask Veillo before you rule anything out.
Start from the rows you need. Where Veillo's own site states a requirement our pages mark as not supported, they are the closer fit on that row by what each side says publicly. For a European company that wants each classification with its article and the version of the law it used, at a public price, start with Complipath's free check.