complai
AI Act compliance, one step at a time.
complai walks companies and public bodies through the duties of Regulation (EU) 2024/1689 and Italian Law 132/2025: it inventories the AI systems in use, classifies them by risk, produces the documentation that is due, and keeps deadlines and incidents in view. The guided path is open and free: ten minutes are enough to know where you stand.
What it does
Inventory and classification
Every AI system enters a register with supplier, purpose, data processed and risk class: prohibited, high risk (Annex III), limited risk, minimal risk, plus GPAI models. It is the first document an inspection asks for.
Obligations computed, not listed
The action plan follows from your answers: providers see Annex IV and CE marking, deployers see Art. 26, logging and the FRIA. No generic checklist to filter by hand.
The file, ready to build
Generative AI policy, updated privacy notice, supplier audit checklist, contract addendum with indemnity clauses, incident form, FRIA: the full document kit, consistent with your answers.
Readiness, measured
A twenty-point governance checklist returns a readiness percentage and the list of gaps, ordered by urgency. Re-run it over time to show progress.
From the right question to the right duty
The engine is not a quiz: it applies the Regulation in sequence. First Art. 5 (prohibited practices, already enforceable), then Annex III (high-risk areas), then Art. 50 (transparency for chatbots, synthetic content and deepfakes). The role you declare — provider, deployer, importer — decides which half of the Regulation concerns you, and the type of organisation settles whether the FRIA is mandatory or merely advisable.
- Per-system classification, with an explicit reason for the verdict
- Obligations ordered by urgency, each with its article reference
- FRIA mandatory for public bodies, essential services, credit and life or health insurance
- Phased roadmap: governance, inventory, assessments, policies, registration
complai comes from a concrete problem: for a small or medium company the cost of compliance is the main obstacle to adopting AI responsibly. Not because the rules are missing, but because turning them into documents, roles and procedures takes time and legal expertise that rarely sit in-house.
The public guided path covers the first half of the problem — knowing which systems you have, which risk class they fall into and what you need to produce. The second half, assisted document generation and continuous monitoring of deadlines, is the work we do together.
Deadlines move, the register does not
Prohibitions already bite and high-risk duties mature by December 2027. Starting from the inventory costs ten minutes.