The six-phase compliance journey
Every system moves through six gate-locked phases — Classify, Scope & literacy, Implement, Assess, Register, Monitor — and empty phases never block.
Veritome organises every system's obligations into a six-phase journey, in this fixed order:
- Classify — confirm role, risk tier and prohibited-use screening.
- Scope & literacy — applicable obligations derived, plus Art. 4 AI literacy.
- Implement — risk management, data governance, human oversight and Annex IV technical documentation.
- Assess — conformity assessment (Art. 43) and impact assessments (Art. 27 FRIA).
- Register — EU database registration (Annex VIII / Art. 49) before market placement.
- Monitor — post-market monitoring, incident reporting and scheduled reviews.
Each obligation belongs to exactly one phase, so a phase is complete when all of its obligations are complete.
Gate locking
Phases are gate-locked: a phase is Locked until every earlier phase that has obligations reaches 100%. A locked phase shows which prior phases are blocking it, so you always know what to finish first. This mirrors the legal reality — you cannot meaningfully register a system whose conformity assessment is unfinished.
Empty phases
Not every phase applies to every system. A deployer, for example, may have no conformity-assessment obligations at all. Phases with no applicable obligations count as complete automatically and never block later phases — role-specific journeys still reach 100%.
Where you see the journey
- System page — the compliance journey bar (six dots under the system header) shows each phase's status at a glance.
- Dashboard — the Systems by phase card groups your portfolio by current phase, and Phase gate alerts highlights systems stuck behind a blocking phase.
A brand-new system whose obligations haven't been generated yet shows every phase as pending (0%), not complete — the gate never reads an un-scoped system as finished. Phase progress updates automatically as you complete obligations.