Written by Yobel Tzegai. Last checked 9 October 2026 against Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744 and against our prices. The capability statuses below were read on 8 October 2026.
With a record at each of the eight steps a reviewer takes, from what the system is to what happens when the law changes. Complipath (complipath.io) keeps each answer with the article behind it. It is a self-assessment with its sources, not a certification or a legal opinion.
Each row with its status on 8 October 2026, from the same table as what Complipath is. Rules decide. AI only drafts. A person confirms.
Starter is €499 a month and includes 20 AI systems. Archived systems don’t count toward your limit. Prices exclude VAT. Your first system is free, with no end date. Growth and Scale are not available yet. Pricing has the full terms.
Every AI system you build or use goes into one inventory, with its owner and its risk class. An AI tool you buy is registered and classified like one you build, with the obligations of a deployer.
Each system is classified by rules in code, and the same answers always give the same result. The outcomes are the Act's: prohibited under Article 5, high-risk under Article 6, transparency duties under Article 50, which can stand beside high-risk, or none of the three.
Each reason behind a verdict names the provision it rests on, so a reader can check it. The export carries the exact law texts the system was assessed against.
Confirming a classification creates the obligations that follow from it, each with an owner, a status and a place for evidence. Each obligation carries the date it applies from, derived from where the provision sits in the Act.
The Annex IV technical documentation is written section by section, in a workspace that says which Annex IV points each section answers. A section can be drafted from the facts in your register, and the draft says which limbs it could not answer. A confirmed section is never rewritten: a new version is opened and the old one kept, and the documentation PDF carries a SHA-256 fingerprint of its content.
A named person stands behind every system and every duty. Confirming a classification stamps it with the person who confirmed it and the time.
A file is linked to the requirements it proves, with the passage quoted and the page it stands on; the quote is checked word for word against that page in code, and nothing changes until a person applies it. The audit log lists who did what and when, on Starter and in the trial, not on Free; no one can edit or delete a line, an owner included. Only deleting the whole workspace removes it. Not available yet, and in progress: one file for an auditor with all of it, the audit pack.
Complipath checks the provisions your confirmed records cite against amending acts and emails you for each affected system. A recorded classification is never rewritten: running it again stores a new one beside it, and the earlier one stays as it was recorded.
No. Complipath is a self-assessment tool: it keeps your own answers, each with the article behind it, and the record of who confirmed what and when. A conformity assessment under Article 43 is a separate procedure for high-risk systems, and Complipath does not run one. Use your lawyer for judgment. Use Complipath for the groundwork.
All eight have a live record behind them. What is not available yet is the single file for an auditor that gathers them, the audit pack, which is in progress. Answering a customer's questionnaire from the register is coming soon. Both are marked in the table above, as read on the date it gives.
Rules decide. AI only drafts. A person confirms. The classification runs on rules in code. A language model drafts documentation sections and reads uploaded files for matching passages, and each draft or match waits for a person to apply it. The audit log records who did what and when.
The register: every system with its risk class and the article, its obligations with owners, status and dates, the documentation and its fingerprinted PDF, the evidence linked with passage and page, and the audit log. The register exports as a spreadsheet, as JSON or as a PDF, with the exact law texts it was assessed against.