What is Veritome?
One register of what your AI systems must do, who owns it and what proves it — across the EU AI Act, GDPR and the standards you switch on.
Veritome turns five rulebooks into one register. You register the AI systems you build or use; the engine derives the EU AI Act and GDPR obligations that apply to each one from its role, risk tier, behaviour and data; and each standard you enable — ISO/IEC 42001, ISO/IEC 27001, NIST AI RMF — becomes a guided programme whose steps produce your policies, records and Statement of Applicability as you go. A record written once counts everywhere it applies.
Veritome prepares your records and keeps the trail. It is not legal advice, and it cannot make a legal determination for you. Everything Aria drafts is a proposal until a named person approves it.
How the app is organised
Four groups in the rail, in the order you work — the first and last open by default, every group folds:
| Group | Screens | What lives there |
|---|---|---|
| Position | Dashboard · AI systems · Obligations | Where you stand. Obligations is the one register — filter it by domain, framework, system or scope. |
| Do the work | Controls · Evidence · Policies · Risks · Suppliers · Incidents | The records that satisfy obligations. Controls and Policies are produced by your programmes, not typed from nothing. |
| Prove it | Assessments · Audit trail · Academy · Documents · Reports | FRIAs, DPIAs, conformity and impact assessments, internal audits; the hash-chained log; Art. 4 literacy records; every document your frameworks require; the reports you generate for a board or an auditor. |
| Configure | Frameworks · Organisation | Switch frameworks on, open their programmes, track regulatory change; members, roles, billing, security, data residency. |
Topics — human oversight, data governance, transparency, post-market monitoring — are not screens. They are domain filters on the Obligations register, and editors open from the record they edit. Controls and Frameworks are absent from the rail while the frameworks-crosswalk switch is off: the cross-mapping of the three standards lands by 13 October, and a module that is not ready does not advertise itself.
Above the rail, four doors — Overview, Workspace, Academy and Help Centre — move between the marketing site, the app, the public Academy and this help centre. Ask Aria in the top bar opens the assistant with the context of the screen you are on.
Five frameworks, one graph
The statutory two are always on. The EU AI Act's duties are generated per system by the obligation engine from the classification you confirm; the GDPR's from the five data questions you answer at registration. The three voluntary standards are programmes you switch on under Frameworks — ordered steps in gated phases, each producing a record, with credit given wherever a requirement is already evidenced by something you did for another framework. See Programmes: a standard as a path, not a list and Frameworks explained.
Where the EU AI Act path sits
Every system moves through the six engine phases — Classify → Scope → Implement → Assess → Register → Monitor — gate-locked, with empty phases counting as complete. The system's header shows where it is; the Dashboard shows the whole estate. The dates come from one registry: Annex III high-risk duties apply from 2 December 2027 under Regulation (EU) 2026/1744, Art. 50 transparency has applied since 2 August 2026, and Art. 4 literacy since 2 February 2025.
Aria
Aria is the assistant: it drafts, maps, proposes and cites — it never files. By default every write it makes lands in its Inbox as a proposal until a named person applies it; an admin can set Auto-apply for low-stakes capabilities, which then apply and are logged for review. Aria runs on Mistral, hosted in Paris under a commercial agreement with no training on your data; the application and its database run in Nuremberg.
Early access
The platform is open free while it is opened up — every workspace has the Govern level of capability, capped at three AI systems, one high-risk system, fifteen members and a hundred AI-assisted assessments a month — and an organisation that joins before 13 October 2026 locks in 30% off, permanently, when billing opens. See Plans, billing and upgrades.
New here? Read Your first 15 minutes, or register your first system and let the engine show you what applies.