Start with a free risk preview. Upgrade to classify individual components, review supporting evidence, and prepare a decision dossier for your team.
No account, no documents, no AI-generated report.
Illustrative preview
Scores and ranks candidates. Evaluated deterministically by statutory filter without LLM intervention.
ACT II · THE DETERMINISTIC ENGINE
From unvetted source specification to immutable, signed statutory dossier. One unified workbench binds decomposed multi-agent systems, anchored source spans, statutory Python rules, and DPO sign-offs into an auditable record.
“The enterprise recruitment platform ingests applicant resumes, extracts feature vectors, then applies an automated algorithmic model that scores and ranks candidates to generate an interview shortlist before human recruiter review, directly influencing employment decisions.”
CMP-02 · Shortlisting & Ranking · Scores and ranks candidates · Annex III §4(a) · High Risk
“High-risk classification triggered under Annex III §4(a) (recruitment / candidate screening). Requires human oversight architecture under Article 14 and works council consultation under applicable national labour law (BetrVG §87, WOR Art. 27, CSE L2312-38, CAO 39).”
“Candidates are scored and ranked before human review.”
FACT-017 verified by DPO lead (no automated assumption)
Annex III §4(a): Employment access trigger active
Predicate: scores_candidates=true AND before_human_review=trueArt. 11 technical documentation not yet deposited by vendor
DPO / Privacy lead
M. Dupont · 2026-08-14
Regulatory counsel
H. Van Damme · 2026-08-15
AI product owner
Action required
AI extracts facts. Humans validate facts. Rules classify risk. Humans sign the record.
system-description.pdf · p.4
“CVs are scored before human review.”
Candidate fact — not a verdict
Human validation before rule execution.
Compare the approaches to classification, evidence, review, and documentation.
Stack Positioning
“Use existing tools for policy management and early exploration, and AZComply when the team needs a traceable EU AI Act decision record with supporting evidence.”
Start with one decision. Govern the portfolio as you grow.
Once your team has a governed decision record, AZComply extends that workflow across your AI systems, evidence and reassessments — when you need it.
Assessments start at 1 credit. Scale to your AI portfolio as deployments grow.
Questionnaire-based risk signals. No LLM-generated report.
1 active AI system, 8 assessment credits per month
1 system included, full dossier PDF generation
Assessments start at 1 credit. Document assessments use 2 credits; trilingual dossiers add 4 credits. Credits are deducted only after the PDF is generated and stored.
Complete production capability
For teams managing several AI systems
Start with one decision. Govern the portfolio as you grow.. Once your team has a governed decision record, AZComply extends that workflow across your AI systems, evidence and reassessments — when you need it.
Enforcement is phased. Some obligations are already applicable; others have transition periods to December 2027 and August 2028. Your dossier tracks what applies now.
Status as of 24 September 2026
Prohibited AI practices, biometric categorisation bans, and transparency disclosures for synthetic media and conversational AI are legally binding across all EU member states.
Annex III high-risk systems
Mandatory conformity assessments, technical documentation, human oversight logging, and works council consultations for employment, critical infrastructure, and credit scoring AI.
Annex I product safety
Integration deadline for AI embedded into regulated physical products (medical devices, machinery, civil aviation) subject to existing third-party EU harmonisation legislation.
Sources: Regulation (EU) 2024/1689, Art. 113 · Digital Omnibus Amending Regulation
Last reviewed: August 2026
Clear answers on statutory classification, legal validity, GDPR overlap, and platform architecture.
AZComply is a regulatory detection tool for EU 2024/1689 (EU AI Act). It classifies your AI system against the regulation's risk framework — Annex III high-risk categories, prohibited practices under Article 5, GPAI obligations, and national law overlays for Belgium, Germany, France, Netherlands, Italy, and Spain. It does not provide legal advice.
Annex III lists 8 categories of AI systems classified as high-risk: biometric identification, critical infrastructure safety components, education and vocational training, employment and worker management, access to essential services, law enforcement, migration and border control, and administration of justice. High-risk systems face the most extensive compliance requirements.
Both. Our multilingual extraction pipeline (hosted on sovereign EU infrastructure in europe-west4 with Zero Data Retention) extracts structured facts from your plain-language description in any of 6 languages. Those facts are then passed to our pure Python deterministic engine, which classifies risk against Articles 5, Annex III, GPAI, and national law overlays. The LLM never decides risk level. The engine is authoritative.
AZComply publishes national routing overlays for 8 EU member states: Belgium (CAO 9/39/81/100), Netherlands (WOR Art. 27), Germany (BetrVG §87(1)(6), BNetzA), France (CSE, CNIL), Italy (Statuto Art. 4, Garante, INL), Spain (ET Art. 64.4(d), RDL 9/2021, AESIA), Finland (Traficom, FIN-FSA) and Ireland (AI Office of Ireland, WRC, DPC). Overlays add national obligations and authority routing; they never change the AI Act risk tier, which the deterministic engine owns.
AZComply processes all data within the EU. The LLM pipeline runs on dedicated sovereign LLM infrastructure in europe-west4 (Netherlands) with Zero Data Retention verified. Database and storage use Supabase in eu-central-1 (Frankfurt). Uploaded documents are processed in-memory and never written to disk. Document text is deleted from memory immediately after extraction. No personal data from assessments is retained beyond the generated report.
A Fundamental Rights Impact Assessment (FRIA) is required under Article 27 for deployers that are public bodies or private entities providing public services. It assesses impacts on fundamental rights including non-discrimination, privacy, and due process. AZComply automatically detects whether FRIA is required based on your system profile.
Fines are tiered. Prohibited practices (Article 5): up to €35M or 7% of global annual turnover. High-risk violations: up to €15M or 3% of turnover. Incorrect information to authorities: up to €7.5M or 1% of turnover. SMEs and startups may receive proportionate penalties.
No. AZComply is a detection tool: it identifies regulatory indicators and generates compliance analysis reports. It does not constitute legal advice, and its output should not be relied upon as a substitute for qualified legal counsel. The tool framing is 'Article X requires...' not 'you are compliant'.
The free questionnaire returns preliminary signals. The Full Assessment turns real system material into a governed decision record - extraction, component separation, evidence, national overlays, and a review-ready dossier.
No account, no documents, no AI-generated report
