What is Veritome?
Veritome turns the EU AI Act into a system-by-system checklist: register your AI systems, let the engine derive the obligations that apply, then evidence and prove the work.
Veritome turns the EU AI Act — Regulation (EU) 2024/1689, all 113 articles and 13 annexes — from a dense legal text into a working, system-by-system checklist for your organisation. You register the AI systems you build or use, the platform's rules engine works out which legal obligations apply to each one, and then it helps you complete, evidence, and prove that work to a regulator.
Veritome gives you informational compliance tooling, not legal advice. Every classification, obligation, and document it produces is a draft for a human to confirm — you and your advisers stay accountable for the final call.
How Veritome is organised
Everything hangs off an AI system. Once a system is registered and classified, the engine generates exactly the obligations that apply to it — no more, no less — and lays them out across the app:
- Dashboard — your whole portfolio at a glance: score, deadlines, what needs attention.
- AI Systems — your inventory. Add, classify, and open any system; each has a 6-phase journey bar and role-tailored tabs.
- Obligations — the cross-portfolio board of every duty that applies, grouped by status.
- Risk Register — Art. 9 risk management and Art. 27 FRIAs across the portfolio.
- Governance, Incidents (Art. 73 reporting) and Calendar — the operating cadence.
- AI Literacy — Art. 4 training for your team (in force since 2 February 2025).
- Reports and Evidence — the proof you'll hand a regulator.
- Ask Aria — the built-in AI assistant, on every page.
The 6-phase journey
Every system moves through the same six phases. Each phase is gate-locked — you cannot jump ahead until the previous phase is 100% complete. Phases with no applicable obligations for a given system are skipped automatically (they count as complete), so a lighter-weight system still reaches the end.
| # | Phase | What happens |
|---|---|---|
| 1 | Classify | Determine the system's risk tier (Art. 5 / 6 / 50) and your operator role. |
| 2 | Scope | Confirm which obligations apply and assign an owner to each. |
| 3 | Implement | Do the work — risk controls, data governance, human oversight, Annex IV documentation. |
| 4 | Assess | Run the conformity assessment (Art. 43) and any impact assessments (Art. 27 FRIA). |
| 5 | Register | Publish to the EU database (Annex VIII / Art. 49) and seal the dossier. |
| 6 | Monitor | Post-market monitoring, incident reporting (Art. 73), and scheduled reviews. |
The journey bar at the top of every system page shows exactly where that system sits, and which phase is the next gate to clear. See The six-phase compliance journey for how gate-locking works.
The four operator roles
The Act assigns obligations by role, not just by system. The same model can make you a provider in one deployment and a deployer in another, so Veritome asks for your role during classification and tailors every tab, checklist, and document to it.
| Role | You are… | Weight | Watch for |
|---|---|---|---|
| Provider | Developing an AI system (or having one built) and placing it on the market under your name. | Heaviest | Full high-risk set: Annex IV tech docs (Art. 11), conformity assessment + DoC (Art. 47) and CE marking (Art. 48), EU-database registration (Art. 49). |
| Deployer | Using an AI system under your own authority in a professional context. | Lighter but real | Human oversight, keeping logs ≥ 6 months (Art. 26(6)), informing affected workers (Art. 26(7)), and — for some systems — a FRIA (Art. 27). |
| Importer | Placing a system from a non-EU provider on the EU market. | Gatekeeper | Verifying the provider's conformity assessment, CE marking, and documentation before placing it (Art. 23). |
| Distributor | Making a system available without changing it. | Lightest | Checking CE marking and accompanying documents are present, and acting if you learn a system is non-conforming. |
Tip: if you materially modify a high-risk system, or put your own brand on it, you can become its provider — with the provider's full obligations. The "placed under your own name" flag in the classification wizard catches exactly this.
New here? Read Your first 15 minutes for the click-by-click setup, or jump straight in and register your first system to let the engine show you what applies.