“Before we countersign, can you send the Annex IV file for the AI features in scope and the deployer rationale?”
Track every AI system, obligation, owner, and deadline in one board.
When a buyer asks how you govern AI, answer from a live inventory: what you use, who owns it, which risk tier applies, and which proof backs the answer — across AI Act, GDPR, EAA, and ISO 42001-aligned controls. Without hiring a governance team.
Built for SaaS teams preparing for the August 2026 AI Act deadline.
Three questions land in your inbox each quarter. ComplAir has the answer.
Most teams do not start with "we want compliance software." They start with a buyer waiting on diligence, an auditor asking for evidence, or a regulator starting a clock. Each one of these costs you an afternoon. ComplAir keeps the answer ready.
“Please attach the latest ROPA and the DPIAs covering the AI systems that touch personal data.”
“We received your notification under Article 33 GDPR. Please confirm the affected categories within 72 hours.”
Each one took an afternoon. ComplAir keeps them ready.
From AI list to review-ready proof.
Stop chasing answers across spreadsheets, Slack threads, and the lawyer's reply queue. ComplAir runs the whole loop.
Start with the systems your team already uses. Complair turns them into decisions, owners, documents, and reusable evidence.
Inventory
Pick from a catalog of 200+ SaaS AI tools, or paste a URL and we'll scrape the rest.
Classify
Our classifier maps each system to Annex III tiers with rationale you can override.
Document
22 auto-generated templates — Annex IV, DPIA, FRIA, AI policy, transparency notice, more.
Track
Vendor questionnaires, state transitions, audit log and deadline reminders.
And when you're ready to show your buyers the work — Complair publishes a trust page they can review themselves. See Scale →
One control can satisfy
three compliance asks.
AI Act, GDPR, EAA, and ISO 42001 often ask for overlapping proof: oversight, transparency, risk management, logging, and incident response. Complair maps controls once, then shows which obligations they support.
Built around EU AI Act obligations, with control mapping that stays compatible with GDPR, EAA, ISO 42001-aligned, and NIST AI RMF workflows.
- 15 controls mapped to 40+ articles across AI Act, GDPR, EAA
- Every checklist item chips the regulations it satisfies
- Evidence attaches once — all covered citations inherit it
- ISO 42001 / NIST AI RMF-aligned export of the control proof
Classify each system
with rationale you can defend.
Add an AI system. We tell you: is it prohibited, high-risk, limited-risk, or minimal? Which Annex III use-case applies. Which obligations kick in. All with plain-English reasoning — and an override if you disagree.
- Automatic Annex III mapping
- Role detection — provider or deployer
- Per-system obligation set with Articles
- Explainable with full rationale
Show the proof when asked.
Move on.
Start free. No credit card. Map your first 5 AI systems, assign owners, and generate the first evidence your buyers will ask for. Stop chasing answers across spreadsheets, Slack threads, and the lawyer's reply queue.