EU AI Act compliance software, built for SMEs
Most compliance tools were built for SOC 2 and ISO 27001, then bolted on an “AI module”. SetAIComply is the opposite: AI-Act-native — built around the exact workflow the EU AI Act asks for, so a small team can get compliant without a consultant’s retainer.
Applicability scoping & Annex III classification
Work out your role (provider or deployer) and whether each system is high-risk under Annex III — guided, not guesswork.
Annex IV technical documentation
Auto-generate the technical documentation file high-risk providers must keep current and available to authorities on request.
24 official EU languages
The platform and the generated documents run in all 24 official EU languages — not English-only.
EU-hosted & GDPR-native
100% hosted in Amsterdam, encrypted end to end, with a DPA available — your compliance data stays in the EU.
DPIAs & evidence collection
Run structured data-protection impact assessments and attach audit-ready evidence to every obligation — included from the free tier.
Compliance Copilot (AI)
An assistant grounded in the official EU AI Act text, in all 24 EU languages — answers cite the articles they rely on. From the Starter plan.
Regulatory radar
Track guidance, delegated acts and deadline changes that affect your systems, with alerts for your team. From the Growth plan.
Shadow AI detection
Surface ungoverned AI use across the organisation before it becomes a compliance gap. From the Growth plan.
Vendor management
Keep your AI vendors' documentation, DPAs and conformity evidence in one register. From the Growth plan.
Bias testing
Run fairness metrics on your models and keep the reports as compliance evidence. From the Scale plan.
Audit trail & SSO
Append-only logging of compliance-relevant changes, plus self-serve single sign-on from the Scale plan (audit log export on Enterprise).
Why “AI-Act-native” beats a bolted-on module
Vanta, Drata and OneTrust are strong security and GRC platforms — but the EU AI Act is not a security framework, so it asks different questions. If your priority is Annex III classification and Annex IV documentation rather than SOC 2 evidence collection, an AI-Act-native tool fits better. Many teams run both.
Pricing
Free from €0 (3 AI systems, 3 DPIAs, PDF export), then Starter from €39.00/mo, plus Growth, Scale and Enterprise. Self-serve — no demo required.
See all plans and what’s includedSecurity & hosting
- 100% EU-hosted in Amsterdam, GDPR-native, end-to-end encrypted, DPA available.
- Not SOC 2 or ISO 27001 certified — and we don’t claim to be (those postures by design, not a certificate).
FAQ
Is there a free tier?
Yes — SetAIComply is free from €0, and the Risk Checker and Snapshot need no account at all.
Does it generate Annex IV technical documentation?
Yes — generating the Annex IV technical file is a core part of the workflow, alongside Annex III risk classification.
Which languages are supported?
All 24 official EU languages, including the generated compliance documents.
Is SetAIComply SOC 2 or ISO 27001 certified?
No — SetAIComply is not SOC 2 or ISO 27001 certified, and does not claim to be. Data is EU-hosted in Amsterdam, GDPR-native, encrypted end to end, and a DPA is available.