EU AI Act compliance, on autopilot
Conforma inventories your AI systems, auto-classifies their risk with citations to the exact Articles, closes every obligation gap, and generates the documentation regulators expect — without hiring a compliance team.
No credit card · 30-second classification · audit-ready in minutes
Aligned with the frameworks your auditors expect
| System | Risk | Owner | Compliance |
|---|---|---|---|
| TalentRank — CV screening | High risk | People Ops | 45% |
| HelpDesk Copilot | Limited | Support | 75% |
| ForecastIQ — demand planning | Minimal | Supply Chain | 100% |
Interactive demo
Classify a system right now
No sign-up. Pick a system below and watch the deterministic engine pin its risk tier, cite the Articles, and count the obligations — live.
- Annex III(4)Intended purpose falls within a high-risk area: Employment & worker management.
The problem
Every company now ships AI. Almost none can prove it's compliant.
The EU AI Act is the world's first comprehensive AI law, and it reaches any organisation whose AI touches the EU market — wherever they're based. Yet compliance today means a lawyer, a spreadsheet, and weeks of cross-referencing a 100-page regulation.
Conforma turns that into a guided workflow: answer a few questions per system, get a defensible classification, and walk out with the evidence and documents you need.
Built for every team
One source of truth for everyone on the hook
The AI Act doesn't sit with one team. Conforma gives each stakeholder the same defensible record.
Defensible, cited classifications and an auditable trail — without manually parsing the regulation.
Know what each model requires before launch, so compliance stops blocking the roadmap.
A single registry of every AI system in the org, its risk tier, and its evidence.
Four risk tiers. One clear answer.
The Act sorts every AI system into a risk tier — and the tier decides what you must do. Conforma pins yours, with the citation.
The practice is banned in the EU. It cannot be placed on the market, put into service, or used. Continued use exposes you to the h…
Permitted only if it meets the full set of obligations in Chapter III before market placement: risk management, data governance, t…
Largely permitted, but specific transparency duties apply: people must be told they are interacting with AI, and synthetic / manip…
No mandatory obligations under the AI Act. Voluntary codes of conduct are encouraged. AI-literacy duties (Art. 4) and general prod…
From unknown to audit-ready in four steps
Register
Add each AI system to your registry — built, bought, or embedded in a product.
Classify
A guided questionnaire maps the system to a risk tier with cited Articles. No lawyer required.
Close gaps
Work through the exact obligations for that tier as a tracked checklist with owners and status.
Generate docs
Draft the technical documentation, transparency notices and declaration of conformity in one click.
The clock is ticking
The EU AI Act application timeline
Obligations switch on in phases under Art. 113. Conforma tracks every milestone so nothing slips.
- 1 Aug 2024Regulation enters into force
The AI Act enters into force; the staged application clock starts.
— - 2 Feb 2025Prohibited practices & AI literacy apply
Bans in Art. 5 become applicable, together with the AI-literacy duty (Art. 4).
— - 2 Aug 2025GPAI, governance & penalties apply
Obligations for general-purpose AI models, the governance framework and penalty regime become applicable.
— - 2 Aug 2026High-risk (Annex III) & transparency apply
The core high-risk obligations for Annex III systems and the Art. 50 transparency duties become applicable. This is the deadline most organisations are racing toward.
— - 2 Aug 2027High-risk (regulated products) apply
High-risk obligations for AI that is a safety component of products already covered by EU harmonised legislation (Annex I) become applicable.
— - 1 Aug 2024Regulation enters into force
The AI Act enters into force; the staged application clock starts.
— - 2 Feb 2025Prohibited practices & AI literacy apply
Bans in Art. 5 become applicable, together with the AI-literacy duty (Art. 4).
— - 2 Aug 2025GPAI, governance & penalties apply
Obligations for general-purpose AI models, the governance framework and penalty regime become applicable.
— - 2 Aug 2026High-risk (Annex III) & transparency apply
The core high-risk obligations for Annex III systems and the Art. 50 transparency duties become applicable. This is the deadline most organisations are racing toward.
— - 2 Aug 2027High-risk (regulated products) apply
High-risk obligations for AI that is a safety component of products already covered by EU harmonised legislation (Annex I) become applicable.
—
Everything you need to prove conformity
A complete toolkit — from cited classification to audit-ready documents.
Cited, not vibes
Every classification and obligation links to the specific Article or Annex of Regulation (EU) 2024/1689 — defensible in an audit.
- Art. 9Risk management system
- Art. 10Data & data governance
- Art. 11 + Annex IVTechnical documentation
- Art. 12Record-keeping (logging)
Annex III coverage
All 8 high-risk areas encoded — from employment and credit scoring to biometrics and law enforcement.
AI-drafted documents
Claude drafts the Annex IV technical file, Art. 50 transparency notices and the EU declaration of conformity, tailored to each system.
Deadline tracking
Live countdowns to each phased application date so nothing slips past 2 Aug 2026 or 2027.
Provider & deployer
Obligations split by your role — whether you build the system or merely deploy someone else's.
GPAI aware
Flags general-purpose AI model obligations (Art. 53+) on top of the system-level risk tier.
A fraction of the cost of the alternatives
Built for the teams on the hook
“We went from a 40-tab spreadsheet to a single registry our auditors actually trust. The cited classifications are the part that sold our GC.”
“Our product team can finally self-serve a risk read before launch instead of waiting two weeks for legal. That alone paid for it.”
“The generated Annex IV draft saved our outside counsel days of work. We treat Conforma as the system of record for AI governance.”
Illustrative of target customers during early access.
The cost of getting it wrong
Penalties under Art. 99 scale to the higher of a fixed cap or a share of worldwide annual turnover.
Enterprise-ready
Security and governance built in
EU data residency, encryption in transit and at rest, SSO/SAML, role-based access, audit logs and a custom DPA. Your compliance tool should be compliant too.
Read about our securityPricing that beats a compliance retainer
A single high-risk audit from a law firm costs more than a year of Conforma. Start free, upgrade when you scale.
Starter
Map your first system
free forever
- 1 AI system
- Risk classification with cited Articles
- Obligation checklist
- Deadline tracking
Team
For teams shipping AI
billed annually
- Up to 25 AI systems
- AI-drafted documentation
- Annex IV technical files
- Audit-ready exports
- Email support
Business
For scaling AI portfolios
billed annually
- Up to 100 AI systems
- Multiple users & roles
- Audit log & change history
- API access
- Priority support
Enterprise
SSO · RBAC · DPAUnlimited systems, SSO/SAML, role-based access, EU data residency, audit logs, custom DPA, and a dedicated compliance success manager.
Frequently asked questions
Does the EU AI Act apply to us if we're not in the EU?+
If your AI system is placed on the market or its output is used in the EU, the Act applies regardless of where your company is based — much like GDPR. Conforma helps any global team scope their exposure.
Is Conforma legal advice?+
No. Conforma is decision-support tooling that encodes the regulation as a structured workflow with citations. It dramatically reduces the work, but you should confirm classifications with qualified counsel.
What's the August 2026 deadline?+
Under Art. 113, the core obligations for high-risk systems (Annex III) and the Art. 50 transparency duties become applicable on 2 August 2026 — the deadline most organisations are racing toward.
How accurate is the classification?+
Classification runs on a deterministic decision tree mapped directly to the Act's text, so every result is traceable to specific Articles. AI is used only to draft documentation and explanations, never to override the cited logic.
Where is our data stored?+
Enterprise plans run in EU data residency with encryption in transit and at rest. See our Security page for the full detail, including SSO, audit logs and our DPA.
Find out where you stand in 30 seconds
No account, no card. Classify your first AI system and see exactly what the EU AI Act requires of it.