Skip to content
SimpleAct Logo

Product overview

EU AI Act compliance in one system

From first risk assessment to finished audit report: inventory, classification, governance and export work together in one system.

Hosted in Germany · Complete audit history · GDPR + EU AI Act

app.simpleact.de

Governance Hub

Owners, reviews and evidence per object

A
Workflows

12

In review

3

Overdue

1

Evidence

28

RISK_ASSESSMENT

AI-based Application Screening

FINAL
OwnerReviewerDue dateApproval

ANNEX_IV_DOSSIER

Service Chatbot "Lia"

IN REVIEW
OwnerReviewerDue dateApproval

COMPLIANCE_CHECKLIST

Marketing Copy Generator

DRAFT
OwnerReviewerDue dateApproval

Sample report

The compliance report in detail

SimpleAct turns your AI inventory into a compliance report showing your implementation status: risk classes, checklists, open points and audit trail. Your evidence status for internal reviews and regulator enquiries is always at hand.

  • PDF export at the push of a button
  • Timestamps & audit trail
  • For internal reviews and regulator enquiries
Create your own report

Sample report with fictitious data · The report documents your implementation status and does not replace a conformity assessment.

Sample GmbHSAMPLE

EU AI Act
Compliance report (sample)

System inventory, high-risk documentation overview and audit trail

Created: 2026-04-18 · Version: v12 · All systems · Sample GmbH

5
Total systems
1
High risk
1
Limited risk
3
Minimal risk
4
Go-live ready
2
Open points
01

Executive Summary

!Implementation status: 2 open points for 1 high-risk system
  • 4 of 5 systems are go-live ready.
  • Candidate Matching (high risk): checklist 4/6, Art. 13 and Art. 14 still open.
  • Risk classification documented for all 5 systems.
  • Changes logged with timestamps in the audit trail.
04

System Inventory

01
GPT-4 AssistantOpenAI
Minimal riskGo-live ready
02
Document AnalysisMicrosoft
Minimal riskGo-live ready
03
Candidate MatchingInternal
High riskIn review
04
Customer Service ChatbotThird party
Limited riskGo-live ready
05
Invoice RecognitionInternal
Minimal riskGo-live ready
Candidate Matching · Checklist 4/6 done67% complete
✓Art. 9Risk management system
✓Art. 10Data governance
✓Art. 11Technical documentation
✓Art. 12Logging
○Art. 13Transparency and user info
○Art. 14Human oversight

SimpleAct Academy

AI literacy under Article 4 – trained inside the system

Since 2 February 2025, Art. 4 EU AI Act requires measures on AI literacy across the company. The SimpleAct Academy trains employees where the inventory and evidence already live – with courses, final tests and certificates.

  • Courses on the EU AI Act (EU AI Act Officer) and information security (phishing and social engineering)
  • Knowledge checks and final tests per course
  • Downloadable certificates – as training evidence per employee
app.simpleact.de

E-Learning Academy

Training on the EU AI Act and information security – at your own pace.

A

Your courses

EU AI ActCertifiedCompleted

EU AI Act Officer

Certificate course for management, compliance, data protection and legal teams: 8 modules on deadlines, roles, risk categories, high-risk obligations, transparency, governance and Article 4.

8 modulesapprox. 3 hFinal test
Progress8/8 · 100 %
Review again
Information securityMandatory · due 31/10/2026

Defending against phishing and social engineering

Practical training on recognising and defending against phishing, social engineering and CEO fraud – with video cases and a reporting guide.

3 modulesapprox. 54 minFinal test
Progress1/3 · 33 %
Resume

My certificates

Final tests you have already passed.

EU AI Act OfficerResult: 92% · Valid until 08/10/2027Download certificate

FAQ

Frequently asked questions

Pricing starts at €159/month and scales with feature scope and number of AI systems. See the pricing section on the homepage for plan details.
Yes: 7 days free with the full Starter scope. The trial requires a credit card: unless you cancel, the Starter subscription continues afterwards, and we remind you of the amount due 3 days before. Cancel any time during the trial. A guided pilot project is also available.
Basic operation is ready immediately. Plan a few hours for the first capture: in a pilot project, six AI systems – one of them high-risk – were captured and assessed in about four hours. API integrations add a few more hours.
SimpleAct is built for SMEs and mid-market companies — without the overhead of large multi-framework GRC suites, but with the EU AI Act and GDPR in one system.

More questions? We're happy to help. Send email · Try 7 days (credit card required)

Security & Operations

Built for regulated environments

The technical facts that security and procurement reviews check first.

Your team

Browser · API · TLS 1.2+

Identity provider

SSO · OIDC, SAML, LDAP

Germany · Hetzner · platform data in DE only

SimpleAct

Tenant isolation · roles

PostgreSQL

encrypted at rest

Backups

daily · Falkenstein

Audit log

append-only · every change with user and timestamp

Data residency
Germany – servers in Nuremberg, backups in Falkenstein (Hetzner)
Hosting
Hetzner, Germany. No cloud providers outside the EU
Encryption
At rest and in transit
Authentication
OIDC / SSO, two-factor authentication
Audit history
Every change logged with user and timestamp, exportable
Access control
Role-based (admin, editor, viewer), tenant isolation
Security & infrastructure in detail