Product overview
EU AI Act compliance in one system
From first risk assessment to finished audit report: inventory, classification, governance and export work together in one system.
Hosted in Germany · Complete audit history · GDPR + EU AI Act
Governance Hub
Owners, reviews and evidence per object
12
3
1
28
RISK_ASSESSMENT
AI-based Application Screening
ANNEX_IV_DOSSIER
Service Chatbot "Lia"
COMPLIANCE_CHECKLIST
Marketing Copy Generator
Modules
Thirteen modules, one record
- AI inventoryCapture every AI system centrally – including shadow-AI candidates.Explore
- AI DiscoveryUncover shadow AI – via Entra ID sign-ins, network logs and the Intune app inventory.Explore
- Risk classificationGuided questionnaire, rule-based EU AI Act classification with rationale.Explore
- Legal logicRole, deployment context and review cadence per system – which obligations apply follows from that.Explore
- GovernanceOwners, reviewers, due dates and approvals per object – with an evidence register.Explore
- Assurance & oversightDataset register, bias findings, human oversight and validation suites for demanding setups.Explore
- Incident managementIncidents from intake to closure, including Art. 73 reporting.Explore
- Runtime monitoringSignals and changes from operations land in the change register.Explore
- Audit exportAudit-ready reports as PDF/DOCX, including the Art. 47 declaration of conformity.Explore
- Audit playbookArticles and gaps become actions with an owner, a due date and the path to the missing evidence.Explore
- GDPR moduleRecords of processing (RoPA), DPIA, TOMs and data subject requests – linked to the AI inventory.Explore
- AcademyE-learning on the EU AI Act and GDPR with final tests and certificates – for the Art. 4 AI literacy duty.Explore
- API & integrationsAPI keys, webhooks and ingestion endpoints – plus Jira, Teams and ServiceNow.Explore
Sample report
The compliance report in detail
SimpleAct turns your AI inventory into a compliance report showing your implementation status: risk classes, checklists, open points and audit trail. Your evidence status for internal reviews and regulator enquiries is always at hand.
- PDF export at the push of a button
- Timestamps & audit trail
- For internal reviews and regulator enquiries
Sample report with fictitious data · The report documents your implementation status and does not replace a conformity assessment.
EU AI Act
Compliance report (sample)
System inventory, high-risk documentation overview and audit trail
Created: 2026-04-18 · Version: v12 · All systems · Sample GmbH
Executive Summary
- 4 of 5 systems are go-live ready.
- Candidate Matching (high risk): checklist 4/6, Art. 13 and Art. 14 still open.
- Risk classification documented for all 5 systems.
- Changes logged with timestamps in the audit trail.
System Inventory
SimpleAct Academy
AI literacy under Article 4 – trained inside the system
Since 2 February 2025, Art. 4 EU AI Act requires measures on AI literacy across the company. The SimpleAct Academy trains employees where the inventory and evidence already live – with courses, final tests and certificates.
- Courses on the EU AI Act (EU AI Act Officer) and information security (phishing and social engineering)
- Knowledge checks and final tests per course
- Downloadable certificates – as training evidence per employee
E-Learning Academy
Training on the EU AI Act and information security – at your own pace.
Your courses
EU AI Act Officer
Certificate course for management, compliance, data protection and legal teams: 8 modules on deadlines, roles, risk categories, high-risk obligations, transparency, governance and Article 4.
Defending against phishing and social engineering
Practical training on recognising and defending against phishing, social engineering and CEO fraud – with video cases and a reporting guide.
My certificates
Final tests you have already passed.
FAQ
Frequently asked questions
More questions? We're happy to help. Send email · Try 7 days (credit card required)
Security & Operations
Built for regulated environments
The technical facts that security and procurement reviews check first.
Your team
Browser · API · TLS 1.2+
Identity provider
SSO · OIDC, SAML, LDAP
Germany · Hetzner · platform data in DE only
SimpleAct
Tenant isolation · roles
PostgreSQL
encrypted at rest
Backups
daily · Falkenstein
Audit log
append-only · every change with user and timestamp
- Data residency
- Germany – servers in Nuremberg, backups in Falkenstein (Hetzner)
- Hosting
- Hetzner, Germany. No cloud providers outside the EU
- Encryption
- At rest and in transit
- Authentication
- OIDC / SSO, two-factor authentication
- Audit history
- Every change logged with user and timestamp, exportable
- Access control
- Role-based (admin, editor, viewer), tenant isolation