Try all features for free — 3 credits included on sign-upTry for free
Skip to main content

Compliance with the AI Act, implemented with rigour.

The French platform that structures, documents and steers your compliance with Regulation (EU) 2024/1689. Diagnostic, Article 11 documentation, human oversight, all on a single audit-ready workflow.

3-minute diagnostic No sign-up required Art. 11 documentation included 3 free credits
aiacto.eu
aiacto interface, AI Act compliance dashboard
Why now?

The AI Act is coming into force. Obligations are piling up.

European Regulation 2024/1689 imposes a cascade of obligations, including technical documentation, human oversight, risk management and transparency, with penalties of up to 7% of global turnover.

Compliance teams have fewer than 19 months to structure their response before the "high-risk" phase of December 2027.

Read our analysis of the regulation
27
Articles applicable to providers of AI systems
AI Act · Chapter III
€35M
Maximum fine or 7% of global turnover
Article 99 §3
4
Risk levels defined by the regulation
Unacceptable → Minimal
DEC 2, 2027
High-risk obligations enter into force
Annex III
The platform

Three modules, one continuous regulatory thread.

Each module produces a defensible deliverable. Reasoned diagnostic, Article 11 documentation, Article 26 register. Reviewed by your team before sign-off.

MODULE 01

Reasoned diagnostic

Identify the risk level, regulatory role (provider, deployer, importer, distributor) and the full list of your obligations in under 5 minutes.

AI Act + Annex III matrix
Audit-ready PDF report
Built-in versioning
HIGH RISKAnnex III §5.b
Credit scoring system
Art. 9, Risk management
Art. 10, Data
Art. 11, Documentation
Art. 14, Human oversight
Learn more
MODULE 02

Article 11 documentation

Draft the 14 sections of Annex IV with an assistant that proposes and you validate. Every paragraph is referenced to its source article.

Annex IV section by section
Exact regulatory wording
Integrated human review
Technical documentation
v1.3
1. General descriptionValidated
2. DevelopmentValidated
3. MonitoringIn progress
4. Risk managementTo review
5. Performance...
Learn more
MODULE 03

Multi-client management

For DPOs and consultancies: centralise the register of AI systems, the history of diagnostics and client validations in a single workspace.

Centralised Art. 26 register
Granular permissions
Complete audit trail
Overview, 9 clients
Client A
Compliant
Client B
In progress
Client C
Q3 audit
Client D
Compliant
Learn more
Methodology

A four-step methodology, aligned with the requirements of the regulation.

From system classification to the final audit file, every deliverable is produced in the order expected by supervisory authorities.

01
CLASSIFY

Identify the risk level

Is the system prohibited, high-risk, limited-transparency or minimal? The guided diagnostic decides in 12 structured questions.

Annex III · Article 6
02
DOCUMENT

Draft the technical documentation

For each high-risk system, produce the 14 sections of Annex IV with the assistant. You validate every paragraph.

Article 11
03
VALIDATE

Have it reviewed by a DPO or counsel

Send a secure link to your external reviewer. They comment, approve or request changes, without creating an account.

Article 14
04
ARCHIVE

Retain for audit

Every version is timestamped and kept for 10 years. PDF export, Article 26 register and audit trail ready to transmit.

Article 12 · 18
Who is concerned

Four regulatory roles, distinct obligations.

The regulation does not treat all actors in the AI chain the same way. Identifying your role, and that of your partners, is the first step of any compliance work.

Review obligations by article
Provider
Art. 16 to 24
64% of users

"Places on the market or puts into service an AI system in the Union, whether for payment or free of charge."

Annex IV technical documentation
Risk management system (Art. 9)
EU declaration of conformity
CE marking and registration
Deployer
Art. 26 to 27
28% of users

"Uses an AI system in the course of a professional activity, under its own authority."

Impact assessment (FRIA, Art. 27)
Human oversight (Art. 26.2)
Up-to-date usage register
Information of data subjects
Importer
Art. 23
5% of users

"Places on the market an AI system bearing the name of an entity established outside the Union."

Verification of provider compliance
10-year retention of documentation
Cooperation with authorities
Reporting of non-conformities
Distributor
Art. 24
3% of users

"Makes an AI system available without modifying its essential properties."

Verification of CE marking
Storage and transport conditions
Cooperation with authorities
Withdrawal from the market if necessary
Security & sovereignty

A French platform, designed for European compliance requirements.

Sovereign hosting, end-to-end encryption, immutable logging and full transparency on the AI models used. Our infrastructure meets the strictest requirements of regulated sectors.

HOSTING
Scaleway · France
DATA
GDPR · Art. 25
ENCRYPTION
AES-256 · TLS 1.3
AUDIT
ISO 27001 (in progress)
Review our sovereignty approach
Guaranteed human oversight
aiacto is classified as "limited risk" under the AI Act. No automated decision impacting the end user.
Art. 14
Data never used for training
Your documents, diagnostics and client data are never used to retrain the models. Contractual commitment.
T&Cs §8
Immutable audit trail
All actions are timestamped and retained for 10 years, in line with post-market retention requirements.
Art. 18
Transparency on AI models
The name, version and provenance of every model used are documented and accessible from your dashboard.
Art. 50
Typical use caseIllustrative example
For a European retail group, structuring documentation for 23 AI systems including 9 high-risk ones takes around four months on aiacto, versus two years in an external consultancy, for a budget six times lower.
DPO
Target profile
DPO · European retail sector
Estimate
Projection based on pilot projects
23
systems to document
4 months
to first certification
85%
estimated savings vs consultancy
Regulatory timeline

Five key milestones to know.

Regulation (EU) 2024/1689 enters into application in successive stages until 2028 (omnibus timeline).

FEB 2, 2025
EFFECTIVE

Prohibited practices + AI Literacy

AI systems with unacceptable risk are prohibited. Mandatory team training.

AUG 2, 2025
EFFECTIVE

GPAI obligations

General-purpose AI models: documentation, transparency on training.

!
NOV 2, 2026
NEXT MILESTONE

Art. 50 transparency

Transparency obligations for generated content and systems interacting with persons.

4
DEC 2, 2027
UPCOMING

High-risk systems (Annex III)

Full application to high-risk systems listed in Annex III of the Regulation.

5
AUG 2, 2028
UPCOMING

Regulated products (Annex I)

Extension to AI systems embedded in products already covered by sectoral legislation.

Dates aligned with the European Parliament's omnibus proposal (March 2026). The regulation's original dates remain applicable until the omnibus is formally adopted.
Pricing

Start free, scale as your needs grow.

Prices in euros, excluding tax. Monthly payment with no commitment. Cancel any time.

Free

To evaluate the platform and run a first diagnostic.

€0forever
Unlimited diagnostics
Risk classification
Obligations identification
Summary PDF export
Start for free
GPAI

For providers of general-purpose AI models.

199 €/ month ex. VAT
Everything in Provider
GPAI Module · Article 53
Training data summary
Downstream documentation
Copyright compliance
Start trial
Enterprise

Multi-client, SSO, SLA and dedicated support.

On requeststarting at 1,200 €
Everything in GPAI
Unlimited multi-tenant
SSO SAML / OIDC
SLA 99.9% + 24/7 support
Dedicated Customer Success
Contact sales
Secure Stripe payment Hosted in France No commitment
Frequently asked questions

Everything you need to know about the AI Act.

Still a question without an answer? Our team replies within 24 working hours.

Regulation (EU) 2024/1689, known as the AI Act, governs the placing on the market and use of artificial intelligence systems in the Union. Concerned actors include: providers (who develop and market), deployers (who use them in a professional context), importers and distributors. Our free diagnostic identifies your exact role in 3 minutes.

Structure your AI Act compliance today.

Three minutes for the diagnostic. Three free credits on sign-up. No credit card. Real-time response.

Start the free diagnostic
No credit card 3 free credits Cancel any time