How to choose

How do you choose EU AI Act compliance software?

Written by Yobel Tzegai. Last checked 9 October 2026 against Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744 and against our prices. The capability statuses below were read on 8 October 2026.

Take a checklist into the demo and ask the tool to show each item on your own system, not on its slides: the AI inventory, your role per system, the classification with its article and reasoning, the Annex IV file, risk management, model and prompt changes, Article 50, evidence linked to requirements and an answer library. Complipath (complipath.io) shows its own status on each item below.

Check your AI systems, free

What Complipath does

Each row with its status on 8 October 2026, from the same table as what Complipath is. Rules decide. AI only drafts. A person confirms.

AI inventory
Every AI system you build or use, with its owner and risk class.
Live
Risk classification
Answers go through rules in code, never a language model, so the same answers always give the same result.
Live
Article mapping
Each reason behind a verdict names the provision it rests on, so a reader can check it herself.
Live
Annex IV documentation
A workspace for the technical documentation, section by section, saying which Annex IV points each one answers.
Live
Obligations per system
Confirming a classification creates the obligations that follow from it, each with an owner, a status and a place for evidence.
Live
Evidence management
A file linked to the requirements it proves, with the passage and its page.
Live
Audit log
Who did what, and when. No one can edit or delete a line, an owner included; only deleting the whole workspace removes it.
Live
Regulatory change monitoring
Checks the provisions your confirmed records cite against amending acts, and emails you per affected system.
Live

What Complipath does not do yet

Full risk-management lifecycle
Article 9 is listed as a duty with its date. There is no risk register to run the cycle in.
Not supported
Customer questionnaires (audit room)
Coming soon: answering a customer's AI questionnaire from your own register.
In progress
Audit pack
One file for an auditor: every system, its classification, evidence, the audit log and a fingerprint. Not available yet.
In progress
Conformity assessment (Article 43)
We found no support for this in what we have built. The same search found the number in one file — a comment using it as an example of the Official Journal's citation form — and the words in six, every one of them quoting Article 6(1), point (b)'s third-party condition, an Article 5 sentence or a section name. No template, no column, no limb.
Not supported
ISO/IEC 42001 mapping
The assistant answers questions about ISO/IEC 42001 next to the AI Act. There is no mapping of its controls to the Act, and Complipath certifies nothing.
Not supported

What it costs

Starter is €499 a month and includes 20 AI systems. Archived systems don’t count toward your limit. Prices exclude VAT. Your first system is free, with no end date. Growth and Scale are not available yet. Pricing has the full terms.

Does it keep an inventory of every AI system?

Every system you build or use, with its owner and its risk class. The Act sorts systems, not companies, so the inventory is where every other answer starts: what an AI inventory holds.

Does it record your role for each system?

Provider or deployer is set per system (Article 3, points (3) and (4)), and a company can be both. The duties differ completely, so a tool that asks once for the whole company has the wrong unit: provider or deployer.

Does it classify with the article and the reasoning?

A label without its provision gives you nothing to check. Ask whether a rule or a language model decides, and whether the answer records the version of the law it rests on: Regulation (EU) 2026/1744 has already replaced Article 4 and moved the high-risk dates. Rules decide. AI only drafts. A person confirms. In Complipath the classification comes from rules in code, and each answer carries the article, the engine version and the law version.

Does it produce the Annex IV file?

For the provider of a high-risk system, the technical documentation of Article 11 contains at least the elements of Annex IV. Ask the tool to open the file for one of your systems and show which points each section answers: Annex IV technical documentation.

Does it run risk management from risk to evidence?

Article 9 asks a high-risk provider for a risk management system run through the lifecycle. In a demo, ask to see one risk carried through: risk, measure, owner, evidence, status and date. Complipath lists the Article 9 duty with its date and has no risk register to run the cycle in; the table on this page says so.

What happens when the model or the prompt changes?

A change to a system can change its classification. A high-risk system that has been through a conformity assessment goes through a new one after a substantial modification, unless, for a system that continues to learn, the change was pre-determined in its technical documentation (Article 43(4)). Ask the tool what it records when a model or a prompt changes, and what it asks you to re-check.

Does it cover the Article 50 disclosures?

Chatbots, voice agents and systems that generate content carry transparency duties whatever their risk tier (Article 50). Ask the tool which of them it sees in your systems: the four Article 50 disclosures.

Is the evidence linked to the requirement it proves?

A folder of files is not evidence until each file is tied to the duty it proves. Ask to see one requirement, its file and the passage in it, and an audit log nobody can edit.

Does it have an answer library for customer questionnaires?

The questions come back in every questionnaire, so an answer written once with its evidence saves the next one: how to answer AI questions in a supplier questionnaire. Complipath is adding questionnaire answers to the app; it is not available yet.

Questions

Should we use the GRC platform we already have?

If it classifies each AI system against the Act and names the article behind each answer, it may be enough, so take the checklist on this page into its demo. A platform built around security frameworks can hold your evidence well and still leave you to do the classification and to record the law version it rests on.

Is a spreadsheet enough?

For one or two systems that are not high-risk, often yes: a row per system with its classification, the article and the date you decided. It stops being enough when the law changes under it or when a customer asks for evidence rather than a statement, which is when the record has to show its own history.

Do we still need a lawyer if we buy a tool?

For judgment, yes. Use your lawyer for judgment. Use Complipath for the groundwork. A tool that shows the article behind each answer lets a lawyer check the groundwork instead of redoing it, so the lawyer's time goes on the questions that need judgment rather than on building the register.

What does Complipath cost?

Starter is €499 a month. Prices exclude VAT. Your first system is free with no end date, so you can run the checklist against the product itself before you pay. Growth and Scale are not available yet. The full terms are on the pricing page, and nothing here is a discount.