Compare · Complipath vs Veritome · Last checked 9 October 2026

Complipath vs Veritome: how do they compare on the EU AI Act?

Each Veritome cell is a sentence from their own site, in their words and not ours, with the page it stood on; each Complipath cell is our own page or our status table. Complipath (complipath.io) is EU AI Act compliance software that classifies each AI system with the article behind the answer.

Written by Yobel TzegaiLast checked 9 October 2026

Choose Complipath if

Rule engine
  • You use AI from other vendors and need each system classified, with the article it rests on.
  • You need the same answer every time. Rules decide. AI only drafts. A person confirms.
  • You want proof linked to each duty: the file and the page it stands on.

Choose Veritome if

In their words
  • What they put first is what you need:
    “Veritome is compliance software for European organisations that use or build AI systems.” In their words and not ours.
    [93]
Price fromComplipath€499 a month[74]VeritomeStarter (€79)[75]
What the price is based onComplipathUp to 20 AI systems[80]Veritome Stated[81]
How it classifiesComplipathRule engine[9]Veritome Stated[10]
Free startComplipathFirst system[76]Veritome Yes[77]
HostingComplipath Yes[66]Veritome Yes[67]
Free trialComplipath Yes[78]Veritome Coming soon[79]

Prices exclude VAT. Our price is the one on the pricing page.

50 requirements, by area

Same list on every comparison page. Open an area to see each line.
AreaComplipathVeritome
Inventory4.5/52.5/5
A register of AI systems Yes[1] Yes[2]
Systems you build and systems you buy Yes[3] Not stated
A named owner per system Yes[4] Yes[5]
Automatic discovery of AI in use Partly[6] Not stated
AI used by your suppliers Yes[7] Partly[8]
Classification and roles4/55/5
EU AI Act risk classification Yes[9] Yes[10]
Prohibited practices (Article 5) Partly[11] Yes[12]
High-risk check against Annex III Yes[13] Yes[14]
The Article 6(3) exemption Yes[15] Yes[16]
Provider or deployer role Partly[17] Yes[18]
Duties, deadlines and follow-up6.5/109/10
Obligations listed per system Yes[19] Yes[20]
The article behind each obligation Yes[21] Yes[22]
Deadlines per obligation Yes[23] Yes[24]
AI literacy (Article 4) Yes[25] Yes[26]
Transparency duties (Article 50) Yes[27] Yes[28]
Monitoring of changes in the law Yes[29] Yes[30]
Post-market monitoring (Article 72) No[31] Yes[32]
Serious incident reporting (Article 73) No[33] Yes[34]
Monitoring of models in operation No[35] Not stated
Tasks, reminders and workflows Partly[36] Yes[37]
Documents and evidence8/109/10
Annex IV technical documentation Yes[38] Yes[39]
AI-assisted drafting of documents Yes[40] Yes[41]
Fundamental rights impact assessment (Article 27) No[42] Yes[43]
EU declaration of conformity (Article 47) No[44] Yes[45]
Export (PDF or other formats) Yes[46] Yes[47]
Evidence linked to each requirement Yes[48] Yes[49]
An audit log or audit trail Yes[50] Yes[51]
Sign-off and approvals Yes[52] Yes[53]
The version of the law each answer used Yes[54] Not stated
Audit-ready reports Yes[55] Yes[56]
Security, hosting and integrations2/105.5/10
An API No[57] Yes[58]
Integrations with ML and engineering tools No[59] Partly[60]
Integrations with work tools No[61] Yes[62]
Single sign-on Not stated publicly[63] Yes[64]
Import from a spreadsheet Not stated publicly[65] Not stated
Hosting in the EU Yes[66] Yes[67]
Encryption Not stated publicly[68] Yes[69]
ISO 27001 or SOC 2 No[70] No[71]
Two-factor sign-in Yes[72] Not stated
Self-hosted or on-premise option No[73] Not stated
Price and getting started8/106.5/10
A public price€499 a month[74] Prices exclude VAT.Starter (€79)[75]
A free tier or free tool Yes[76] Yes[77]
A free trial Yes[78] Coming soon[79]
What the price is based onUp to 20 AI systems[80] Yes[81]
A plan for small companies Yes[82] Partly[83]
Sign-up without talking to sales Yes[84] Yes[85]
A stated time to first result Not stated publicly[86] Yes[87]
A demo or sales call to start Yes[88] Coming soon[89]
Onboarding help Yes[90] Not stated
Other frameworks (ISO/IEC 42001, NIST AI RMF) No[91] Yes[92]

Counts = requirements met in full. Partly counts as half. “Not stated” counts as zero and is never guessed. Veritome: 42 of 50 stated on the 20 pages we read. Complipath: 46 of 50 answered by our own pages.

Where Veritome is better

  • Post-market monitoring (Article 72): their site says so[32]. Complipath: no.
  • Serious incident reporting (Article 73): their site says so[34]. Complipath: no.
  • Fundamental rights impact assessment (Article 27): their site says so[43]. Complipath: no.
  • EU declaration of conformity (Article 47): their site says so[45]. Complipath: no.
  • An API: their site says so[58]. Complipath: no.
  • Integrations with ML and engineering tools: their site says so in part[60]. Complipath: no.
  • And 5 more in the areas above.

Where Complipath is better

  • Systems you build and systems you buy: Complipath yes[3]; not stated on the 20 pages of Veritome's site we read.
  • The version of the law each answer used: Complipath yes[54]; not stated on the 20 pages of Veritome's site we read.
  • Two-factor sign-in: Complipath yes[72]; not stated on the 20 pages of Veritome's site we read.
  • Onboarding help: Complipath yes[90]; not stated on the 20 pages of Veritome's site we read.
Sources · 20 pages on Veritome's website, read 9 October 2026Show sources
[1]
A register of AI systems · Complipath

Live. Every AI system you build or use, with its owner and risk class. The status table: what Complipath is.

[2]
A register of AI systems · Veritome
“A register of your AI systems with a recorded classification for each;”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[3]
Systems you build and systems you buy · Complipath

Live. Every AI system you build or use, with its owner and risk class. The status table: what Complipath is.

[4]
A named owner per system · Complipath

Live. A person behind every system and every duty. The status table: what Complipath is.

[5]
A named owner per system · Veritome
“Every duty gets a named owner and a state anyone can read.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[6]
Automatic discovery of AI in use · Complipath

Partly. The free readiness review suggests AI systems from your public web pages; a system your website does not describe is in it only if you name it. Source.

[7]
AI used by your suppliers · Complipath

Live. Groups your systems by vendor and shows which papers you hold from each, which are missing and which have expired. The status table: what Complipath is.

[8]
AI used by your suppliers · Veritome
“Veritome seals the package on the provider side and lets the deployer import it on theirs.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[9]
EU AI Act risk classification · Complipath

Live. Answers go through rules in code, never a language model, so the same answers always give the same result. Rules decide. AI only drafts. A person confirms. The status table: what Complipath is.

[10]
EU AI Act risk classification · Veritome
“Record what it does, who uses it and who is answerable. Role and risk tier fall out of the answers, and the reasoning stays beside the decision rather than in somebody's inbox.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[11]
Prohibited practices (Article 5) · Complipath

Partly. Article 5(1), points (d), (e), (f), (g) and (h) are decided. Points (a), (b) and (c) turn on judgement and are flagged for legal review instead of being decided. Source.

[12]
Prohibited practices (Article 5) · Veritome
“The intake mirrors the Act's own order — prohibited practices first, then Annex I, the Annex III areas, the Article 6(3) carve-outs and the Article 25 triggers — plus the five GDPR questions that decide which data-protection duties join the register.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[13]
High-risk check against Annex III · Complipath

Yes. A use case that appears in Annex III is high-risk under Article 6(2) unless the Article 6(3) exemption applies. Source.

[14]
High-risk check against Annex III · Veritome
“The intake mirrors the Act's own order — prohibited practices first, then Annex I, the Annex III areas, the Article 6(3) carve-outs and the Article 25 triggers — plus the five GDPR questions that decide which data-protection duties join the register.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[15]
The Article 6(3) exemption · Complipath

Yes. If the use case appears in Annex III, Article 6(2) classifies it high-risk unless the Article 6(3) exemption applies, and profiling of natural persons blocks the exemption entirely. Source.

[16]
The Article 6(3) exemption · Veritome
“Art. 6(3) exception assessment, the six criteria argued one by one.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[17]
Provider or deployer role · Complipath

Partly. Which obligations follow from the role you stated is decided. Whether you are the provider or the deployer is asked, never inferred. Source.

[18]
Provider or deployer role · Veritome
“Veritome derives the duty set per system from the role you record against it.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[19]
Obligations listed per system · Complipath

Live. Confirming a classification creates the obligations that follow from it, each with an owner, a status and a place for evidence. The status table: what Complipath is.

[20]
Obligations listed per system · Veritome
“Your role and risk tier decide the list. You never assemble it by hand.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[21]
The article behind each obligation · Complipath

Live. Each reason behind a verdict names the provision it rests on, so a reader can check it herself. The status table: what Complipath is.

[22]
The article behind each obligation · Veritome
“Every obligation cites its article, and every date comes from the regulatory registry rather than from the screen that shows it.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[23]
Deadlines per obligation · Complipath

Live. Each obligation carries the date it applies from, derived from where the provision sits rather than written onto the row. The status table: what Complipath is.

[24]
Deadlines per obligation · Veritome
“Veritome reads them from one registry, shows them beside each duty, and colours nothing red before its statutory date.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[25]
AI literacy (Article 4) · Complipath

Live. Records who was trained on what and when, against the Article 4 duty to support AI literacy, which applies whatever your risk level. The status table: what Complipath is.

[26]
AI literacy (Article 4) · Veritome
“Free, role-based EU AI Act training, with a certificate your Article 4 register counts.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[27]
Transparency duties (Article 50) · Complipath

Yes. Article 50 makes some systems tell people they are dealing with AI, and a system can carry that duty and be high-risk at the same time. Source.

[28]
Transparency duties (Article 50) · Veritome
“Work the obligations you actually have — Art. 4 literacy and Art. 50 transparency — with owners, dates and evidence.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[29]
Monitoring of changes in the law · Complipath

Live. Checks the provisions your confirmed records cite against amending acts, and emails you per affected system. The status table: what Complipath is.

[30]
Monitoring of changes in the law · Veritome
“We monitor the EU AI Office, the European Commission and the relevant supervisory authorities, and update the regulatory registry the toolkit runs on.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[31]
Post-market monitoring (Article 72) · Complipath

Not supported. We found no support for this in what we have built. MVP searched 245 shipped source files, 44 migrations, 14 obligation templates, 15 export columns and 12 Annex IV limbs, on the article number and on the provision's own words: nothing on any of the five. The status table: what Complipath is.

[32]
Post-market monitoring (Article 72) · Veritome
“Post-market monitoring plan and serious-incident reporting workflow.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[33]
Serious incident reporting (Article 73) · Complipath

Not supported. We found no support for this in what we have built. Same search, same five places: nothing. The status table: what Complipath is.

[34]
Serious incident reporting (Article 73) · Veritome
“Post-market monitoring plan and serious-incident reporting workflow.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[35]
Monitoring of models in operation · Complipath

No. Complipath does not monitor AI models while they run.

[36]
Tasks, reminders and workflows · Complipath

Partly. Each obligation has an owner, a status and a date it applies from. When an amending act touches a provision your records cite, you get an email per affected system. Source.

[37]
Tasks, reminders and workflows · Veritome
“Every piece of evidence carries a SHA-256 fingerprint and an expiry; lapsing proof stops counting and reminds its owner.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[38]
Annex IV technical documentation · Complipath

Live. A workspace for the technical documentation, section by section, saying which Annex IV points each one answers. The status table: what Complipath is.

[39]
Annex IV technical documentation · Veritome
“generated documents — Annex IV technical files, fundamental rights impact assessments, declarations of conformity, Annex VIII registration sheets — hash-sealed with a public verification URL.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[40]
AI-assisted drafting of documents · Complipath

Live. Drafts a documentation section from the facts in your register, and says which limbs it could not answer. The status table: what Complipath is.

[41]
AI-assisted drafting of documents · Veritome
“Aria drafts records, maps requirements and monitors change, and every write lands in its Inbox as a proposal until someone accepts it.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[42]
Fundamental rights impact assessment (Article 27) · Complipath

Not supported. The step-by-step plan lists Article 27 as a step only for systems classified under points 5(b) and 5(c) of Annex III. Article 27(1) also binds deployers that are bodies governed by public law or private entities providing public services, and the product does not ask whether you are one. Nothing carries the assessment itself. The status table: what Complipath is.

[43]
Fundamental rights impact assessment (Article 27) · Veritome
“generated documents — Annex IV technical files, fundamental rights impact assessments, declarations of conformity, Annex VIII registration sheets — hash-sealed with a public verification URL.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[44]
EU declaration of conformity (Article 47) · Complipath

Not supported. The Annex IV documentation asks for a copy of the declaration and you upload it; the plan says to issue it when the system is ready. The declaration itself is not drafted. The status table: what Complipath is.

[45]
EU declaration of conformity (Article 47) · Veritome
“generated documents — Annex IV technical files, fundamental rights impact assessments, declarations of conformity, Annex VIII registration sheets — hash-sealed with a public verification URL.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[46]
Export (PDF or other formats) · Complipath

Live. The whole register as a spreadsheet, as JSON or as a PDF, with the exact law texts it was assessed against. The status table: what Complipath is.

[47]
Export (PDF or other formats) · Veritome
“From Starter onwards every generated document — technical files, assessments, transparency notices, obligation maps — exports as branded PDF or DOCX to keep for your records, review with counsel, or use as the basis of a submission you make yourself.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[48]
Evidence linked to each requirement · Complipath

Live. Upload a file once. We read it and use it everywhere it helps: proof for requirements, text for the documentation, and a flag when it disagrees with an earlier answer. The status table: what Complipath is.

[49]
Evidence linked to each requirement · Veritome
“Evidence links to its duties, and stops counting the day it lapses.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[50]
An audit log or audit trail · Complipath

Live. Shows who did what in the workspace, and when, as a list you can read and export. The status table: what Complipath is.

[51]
An audit log or audit trail · Veritome
“Policies, approvals, suppliers, risk register, evidence library, audit trail”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[52]
Sign-off and approvals · Complipath

Yes. Confirming a classification stamps it with the person who confirmed it and when; a documentation section is marked reviewed by a named person on a date. Source.

[53]
Sign-off and approvals · Veritome
“Aria proposes. A named person approves.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[54]
The version of the law each answer used · Complipath

Yes. Each assessment records which version of the legal text it was made against, and which provisions have been amended since. Source.

[55]
Audit-ready reports · Complipath

Live. One file with every classification, citation and confirmation — the one you hand to someone outside your company. The status table: what Complipath is.

[56]
Audit-ready reports · Veritome
“The evidence pack export starts at Govern.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[57]
An API · Complipath

No. Complipath has no API for customers.

[58]
An API · Veritome
“Manage plus multi-entity, single sign-on, API access and a custom Data Processing Agreement. No self-serve checkout — talk to us.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[59]
Integrations with ML and engineering tools · Complipath

No. Complipath does not connect to ML or engineering tools.

[60]
Integrations with ML and engineering tools · Veritome
“Upload it, generate it, or pull it from Google Drive, SharePoint, GitHub or Jira.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[61]
Integrations with work tools · Complipath

No. Complipath does not connect to work tools.

[62]
Integrations with work tools · Veritome
“Upload it, generate it, or pull it from Google Drive, SharePoint, GitHub or Jira.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[63]
Single sign-on · Complipath

Not stated publicly.

[64]
Single sign-on · Veritome
“Manage plus multi-entity, single sign-on, API access and a custom Data Processing Agreement. No self-serve checkout — talk to us.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[65]
Import from a spreadsheet · Complipath

Not stated publicly.

[66]
Hosting in the EU · Complipath

Yes. Your workspace is stored in Frankfurt: the database in Supabase's eu-central-1 region and the app's functions in Vercel's fra1 region, read on 8 October 2026. Source.

[67]
Hosting in the EU · Veritome
“Yes. Your compliance data is stored and processed in the EEA: the application, database and object storage run on Hetzner in Germany, and Aria's AI processing runs on Mistral in France.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[68]
Encryption · Complipath

Not stated publicly.

[69]
Encryption · Veritome
“Encrypted at rest and in transit”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[70]
ISO 27001 or SOC 2 · Complipath

No. Complipath is not SOC 2 certified and not ISO 27001 certified. Source.

[71]
ISO 27001 or SOC 2 · Veritome
“We have not yet completed an external penetration test or a third-party audit; when we do, the report will be available here.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[72]
Two-factor sign-in · Complipath

Live. A code from your phone after the email link. The owner can require it for everyone. The status table: what Complipath is.

[73]
Self-hosted or on-premise option · Complipath

No. Complipath runs only as the hosted service.

[74]
A public price · Complipath

Starter is €499 a month. Prices exclude VAT. Pricing.

[75]
A public price · Veritome
“The public beta is free with 30% off locked in for life; from the full launch, Classify, Starter (€79), Govern (€199) and Manage (€599), Enterprise by quote;”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[76]
A free tier or free tool · Complipath

Yes. Your first system is free with no end date. The check needs no account. Source.

[77]
A free tier or free tool · Veritome
“Register up to three systems, classify them, and read the article each conclusion rests on. Free, no card.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[78]
A free trial · Complipath

No card. Full access for 30 days, then it drops to the free plan — nothing is deleted and your export keeps working. Pricing.

[79]
A free trial · Veritome
“The beta is never a trial or a free month.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[80]
What the price is based on · Complipath

Starter includes 20 AI systems. Archived systems don’t count toward your limit. Pricing.

[81]
What the price is based on · Veritome
“Your plan sets how many systems the register holds — three on Classify, five on Starter, twenty-five on Govern, unlimited from Manage — and how many of them may be high-risk.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[82]
A plan for small companies · Complipath

Yes. Your first system is free with no end date. You pay for your AI portfolio, not your number of employees. Source.

[83]
A plan for small companies · Veritome
“One or two systems, getting the basics right — the AI literacy and transparency duties every user of AI has.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[84]
Sign-up without talking to sales · Complipath

Yes. The check needs no account, and the trial needs no card. Source.

[85]
Sign-up without talking to sales · Veritome
“Classify your first AI system free, in under ten minutes — no credit card, no sales call.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[86]
A stated time to first result · Complipath

Not stated publicly.

[87]
A stated time to first result · Veritome
“Classify your first AI system free, in under ten minutes — no credit card, no sales call.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[88]
A demo or sales call to start · Complipath

Not required. The check needs no account, and a walkthrough can be booked if you want one. Source.

[89]
A demo or sales call to start · Veritome
“No self-serve checkout — talk to us.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[90]
Onboarding help · Complipath

Book 30 minutes and we set up your first AI systems with you. Pricing.

[91]
Other frameworks (ISO/IEC 42001, NIST AI RMF) · Complipath

Not supported. The assistant answers questions about ISO/IEC 42001 next to the AI Act. There is no mapping of its controls to the Act, and Complipath certifies nothing. The status table: what Complipath is.

[92]
Other frameworks (ISO/IEC 42001, NIST AI RMF) · Veritome
“Every system worked, one high-risk system included, and ISO/IEC 42001 and NIST AI RMF alongside the Act.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.
[93]
What they put first · Veritome
“Veritome is compliance software for European organisations that use or build AI systems.”Veritome, in their words and not ours. It was read on 9 October 2026 from veritome.eu.

The 20 pages of Veritome's site we read, on 9 October 2026:

Try both on the same system.Complipath's first system is free. Compare the answer you get with Veritome's.
All comparisonsCheck your AI systems, free

Questions

Is this comparison neutral?

It is written by Complipath, so read it as ours. What keeps it checkable is the rule on both sides: each Veritome cell is their own sentence with the page it stood on, and each Complipath cell is what our own pages say. Where a side's pages say nothing, the cell says so.

What does "Not stated on the pages we read" mean?

That none of the 20 pages of Veritome's site we read on 9 October 2026 said it. It is a statement about those pages, listed below, not about the product: ask Veritome before you rule anything out.

Which one should we choose?

Start from the rows you need. Where Veritome's own site states a requirement our pages mark as not supported, they are the closer fit on that row by what each side says publicly. For a European company that wants each classification with its article and the version of the law it used, at a public price, start with Complipath's free check.