EU AI Act compliance software for tracking AI Act requirements

Compliance has an EU AI Act catalog. It holds requirements for these parts of the AI Act:

• Art. 4 on AI literacy
• Art. 5 on prohibited AI practices
• Art. 6(1) on high-risk AI in regulated products
• Art. 16 on providers of high-risk AI
• Art. 26 on deployers of high-risk AI
• Art. 50 on transparency for certain AI systems
• Art. 53 and Art. 55 on providers of general-purpose AI models

The catalog marks Art. 4 and Art. 5 as mandatory and the other requirements as optional. On the Applicability page you mark which of them apply to your organisation. Compliance does not decide whether your AI system is high-risk. You make that call, with your own legal advice.

The AI Act applies in stages. The European Commission's AI Act Service Desk lists these dates, after the Digital Omnibus on AI, Regulation (EU) 2026/1744, published in the Official Journal on 24 July 2026 and in force since 27 July 2026:

• 2 February 2025: the general provisions, AI literacy and the prohibitions
• 2 August 2025: the rules for general-purpose AI models
• 2 August 2026: most other rules, including the transparency rules in Art. 50
• 2 December 2026: new prohibitions on AI that generates non-consensual sexual deepfakes or child sexual abuse material
• 2 December 2027: the rules for high-risk AI systems in Annex III
• 2 August 2028: the rules for high-risk AI in regulated products under Annex I

This page is not legal advice.

If you also adopt ISO 42001, shared crosswalk topics show where the frameworks overlap:

• Transparency. ISO 42001 control A.8.2 is equivalent to AI Act Art. 50.
• Human oversight. ISO 42001 controls A.9.2, A.9.3 and A.9.4 relate to AI Act Art. 26.
• Lifecycle. ISO 42001 clauses 8.1, 8.2, 8.3 and 8.4 relate to AI Act Art. 16.
• AI literacy. AI Act Art. 4 relates to ISO 42001 clause 7.2 on competence.

Evidence, findings and register records can meet requirements in both frameworks. AI Act requirements outside these topics have no crosswalk link to ISO 42001.

Compliance has registers for policies, risks, assets, suppliers, evidence and findings, among others. The registers are shared between the frameworks you adopt, so the EU AI Act and ISO 42001 use the same records.

Each risk has a score on a 5×5 likelihood and impact matrix. Treatment actions lower the residual risk score.

Compliance creates recurring review tasks for policies, risks, assets and requirements on schedule. Every task has an owner and a due date, and all tasks appear in one inbox.

Compliance also has an AI assistant on every page. It runs on AI credits, billed in USD, and it is not part of the trial unless you buy AI credits.

Compliance does not make your organisation compliant with the AI Act. It is where you track the requirements you marked as applicable and keep the evidence for them.

Michiel van der Meer built Compliance after taking over an ISMS at Jewel and seeing how much hand-work it took. He needed a better solution, so he built one.

The EU AI Act is €199 per framework per year, excl. VAT. Users in your organisation are unlimited. The price includes $5 of AI credit per year, billed in USD, and you can buy extra credits.

You pay for each framework you adopt separately. The EU AI Act and ISO 42001 together cost €199 plus €749 a year, excl. VAT.

Try Compliance for 30 days without a credit card. The trial gives you full access to every framework. The AI assistant is not part of the trial unless you buy AI credits.

See all Compliance pricing →