Framework
The AI Act applies to every company that uses AI professionally and to providers that place AI systems on the market or build them into products. Complass guides you from the AI register through classification to the obligations of your role.
This framework is also available on its own with a fixed scope: also as an individual package
The AI Act is Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence, last amended by Regulation (EU) 2026/1744. It prohibits certain AI practices, sets requirements for high-risk AI systems, lays down transparency obligations and requires providers and deployers to take measures for the AI literacy of their staff.
Content as of:
The Regulation applies across the EU to providers, deployers, importers, distributors and product manufacturers of AI systems. Anyone using AI professionally is a deployer and must at least support the AI literacy of their staff and rule out prohibited practices. Further obligations depend on the risk of the intended purpose, for example for AI in recruitment or as a safety component of a product.
Since Regulation (EU) 2026/1744, the obligations for high-risk AI systems apply from 2 December 2027 under Annex III and from 2 August 2028 under Annex I. For AI safety components of machinery, the requirements will in future come via the Machinery Regulation.
This overview does not replace legal advice. The legal or normative text is authoritative; in Complass you check applicability with guidance based on the references.
Key dates according to the consolidated version of 27.07.2026. Delegated acts, guidelines and harmonised standards of the Commission supplement the Regulation step by step.
Nine phases from roles and governance through the AI register and classification to deployer and provider obligations, transparency and regular review.
The main obligations for deployers, providers, importers, distributors and product manufacturers with original wording, status and evidence.
AI policy, AI register, classification record, AI literacy plan, deployer checklist, fundamental rights impact assessment, transparency notices and, for providers, risk management plan and technical documentation according to Annex IV.
Learning blocks for all employees and for those responsible for AI governance, with assignment, progress and participation certificate as evidence for Art. 4.
For high-risk AI systems that you operate, Complass tracks the obligations under Art. 26 paragraph by paragraph with status, owner, measure, evidence and resubmission date. For the fundamental rights impact assessment under Art. 27, Complass gives a hint based on your classification as to whether it may be required; you take the decision and record the reasons. You capture the six items under Art. 27(1) in a guided way, with the date of the notification to the market surveillance authority.
Catalogue: Catalogue of obligations by role and article
Implement frameworks with guidance: phases, templates, document pyramid, catalogues, gap analysis, objectives and action plan up to the audit in the auditor portal.
Learn moreRisk register with qualitative or quantitative assessment, risk appetite and treatment plan, linked to assets, vulnerabilities and incidents.
Learn moreRecord incidents, check reporting obligations under NIS2, the CRA and the GDPR and track the reporting deadlines with a countdown.
Learn moreThe AI Act is included as baseline protection in every Complass plan. A larger plan adds further modules.
The AI Act is included as baseline protection in every Complass plan, from Start at €179 net/month.
With annual payment, 12 months minimum term. Monthly payment with a 15 % surcharge. All prices net plus VAT, as of 16 October 2026.
Adjust the selection in the price overview: minimum selection AI Act
Business
More impact with Risk management and Business continuity management (BCM), room for 10 users and 2 frameworks.
€449 net/month, €270 more than the minimum selection.
With annual payment, 12 months minimum term. Monthly payment with a 15 % surcharge. All prices net plus VAT, as of 16 October 2026.
Good to know: You can also meet the obligations without Complass. Complass supports you with implementation and evidence but does not replace legal advice. Legal information
Yes, as a deployer: you must take measures for the AI literacy of users and rule out prohibited practices. Further obligations only arise for high-risk purposes or transparency cases.
AI for quality control or performance optimisation is not considered a safety component. For AI safety components of machinery only a few articles of the AI Act apply; the requirements come via the Machinery Regulation. Complass links the AI Act, Machinery Regulation and CRA projects for this.
Only in certain cases. Art. 27(1) obliges deployers that are bodies governed by public law or private entities providing public services, as well as deployers of high-risk AI systems under Annex III point 5(b) and (c) (creditworthiness, risk assessment and pricing in life and health insurance), before first use. The obligation does not apply to high-risk AI systems in the area of critical infrastructure (Annex III point 2). Complass gives a hint based on your classification; you take the decision.
No. Complass structures classification, obligations and evidence based on the legal text; the legal assessment of the individual case remains with you.
Set up your trial yourself, with a sample project per framework if you like. If you would rather see Complass first, request a demo.
