EU AI Act — High-risk deadline: December 2027

Your company uses AI.
Can you prove it's legal?

The EU AI Act high-risk deadline is December 2027. The compliance assessment process takes 6–12 months. Companies that start in 2027 are already too late — and most have no idea where to begin.

€35M
Max fine (prohibited AI)
7%
of global annual turnover
65,000+
High-risk AI systems in scope
Dec 2027
High-risk compliance deadline
$500/hr
Average lawyer cost to do this manually

The problem

Every company using AI in Europe
must now prove 5 things.

Regulators can audit you at any time. Most companies have no documentation, no inventory, and no idea what they're legally required to show.

01
AI Inventory
List every AI system your company uses — ChatGPT, Copilot, your hiring tool, your fraud detection model. All of them.
Manual: 2-4 weeks
02
Risk Classification
Classify each system as prohibited, high-risk, limited-risk, or minimal-risk under the Act's four-tier framework.
Manual: requires legal expertise
03
Technical Documentation
Create Annex IV documentation for high-risk systems — training data, architecture, human oversight mechanisms.
Manual: €5k–€50k per system
04
Human Oversight Proof
Demonstrate that a human can review, override, and stop every AI system in your company at any time.
Manual: weeks of process design
05
Continuous Monitoring
Keep all documentation current as the law changes, new AI tools are added, and regulators update guidelines.
Manual: never truly done
⚡
Complipath does all 5.
Automatically. In minutes.
Automated: plug in → compliant

How it works

Three steps.
No lawyers required.

Complipath connects to your existing tools, does the hard work automatically, and keeps you compliant as the law evolves.

🔌
Connect your tools
Connect your Google Workspace, Microsoft 365, Slack, GitHub, and other platforms. Complipath automatically discovers every AI system your company uses — including the ones you've forgotten about.
⚖️
Get your risk report
Every AI system is automatically classified against the EU AI Act's four risk tiers. You see exactly which systems are compliant, which need action, and what that action is — in plain language, not legalese.
📋
Stay compliant automatically
Complipath generates your technical documentation, monitors for law changes, and alerts you when something new requires action. Your compliance is always current — not a snapshot from 6 months ago.

The market

Finally, a tool built
for your company size.

Enterprise GRC platforms cost €100k+/year and require a sales call. Free tools do the bare minimum. We fill the gap.

Feature Free tools (Legalithm) Enterprise (OneTrust) Complipath ✦
Auto-discover AI systems ✗ ✓ ✓
Risk classification ✓ ✓ ✓
Auto-generated documentation ✗ ✓ ✓
Continuous monitoring ✗ ✓ ✓
Law change alerts ✗ ✓ ✓
No sales call required ✓ ✗ ✓
Price per month Free (limited) €30,000+/year From $499

Pricing

Less than one hour
of a compliance lawyer.

No contracts, no setup fees, no sales calls. Start in minutes and cancel anytime.

Starter
$499/mo
For startups with up to 10 AI systems
  • Auto-discovery of up to 10 AI systems
  • Risk classification for all systems
  • Basic compliance documentation
  • Monthly law change summary
  • Email support
Get early access
Most popular
Growth
$1,499/mo
For scale-ups with up to 50 AI systems
  • Everything in Starter
  • Auto-discovery up to 50 AI systems
  • Continuous real-time monitoring
  • Instant alerts for new risk flags
  • Audit-ready documentation export
  • GDPR + AI Act integration
  • Priority support
Get early access
Scale
$3,999/mo
For companies with 200+ employees
  • Everything in Growth
  • Unlimited AI systems
  • White-label audit reports
  • Regulator submission support
  • Dedicated compliance advisor
  • Custom integrations
  • SLA guarantee
Get early access

Questions

Things companies
always ask us.

Does the EU AI Act actually apply to my company?
If your company uses AI and has any customers or operations in the EU — yes. The Act applies extraterritorially, just like GDPR. This includes US companies with European customers, and EU companies of all sizes. There is no size exemption, though SMEs receive reduced fines.
We only use ChatGPT and Copilot. Do we need this?
Almost certainly yes. Using AI tools in hiring, customer decisions, or data analysis often qualifies as high-risk use under the Act — even if the tool itself is a generic model. The risk classification depends on how you use it, not just what it is. Complipath tells you exactly where you stand.
Why not just use a lawyer?
You can — and for complex cases, you should. But a lawyer charges $500/hour and produces a static document that's outdated the moment the law changes or you adopt a new AI tool. Complipath is always current, always monitoring, and costs less per month than 3 hours of legal time.
The deadline moved to December 2027. Why act now?
The December 2027 deadline sounds far away — but the conformity assessment process for high-risk AI systems takes 6–12 months to complete. That means companies that start in mid-2027 are already too late. Additionally, transparency obligations and GPAI model rules are already in force now. The companies winning on this are the ones building their compliance infrastructure today, not scrambling at the deadline.
How do you discover AI systems we've forgotten about?
Complipath connects to your existing platforms — Google Workspace, Microsoft 365, Slack, GitHub, Jira, and more — and scans for AI-powered features, API calls to AI providers, and third-party SaaS tools with embedded AI. Most companies discover 20-40% more AI usage than they thought they had.

December 2027 is closer
than it looks.

The compliance assessment process takes 6–12 months. The companies that start now finish ahead. The ones that wait scramble at the deadline.