From “which rules apply?” to a record you maintain.
Free tools can help you explore the Act. Veillo connects that answer to the systems, owners, decisions, documents, and review history inside your organisation.
Compliance posture
Start from the tools and use cases already in play.
A legal answer is only useful if it connects to what people actually use. Veillo builds the system-level record, then keeps each purpose and owner attached.
- Pick from a pre-built library, grouped by category, with brand logos so they are easy to spot.
- Add custom-built systems in free text; the classifier reads the description.
- Give every system a purpose, owner, and review state so the register can become an operating record.
A reviewed decision for every real use.
Classification depends on the deployment, not the logo. Veillo maps each use case to a risk tier with reviewed reasoning and keeps the human confirmation attached.
- Prohibited, high-risk, limited, or minimal, with the Annex III reference.
- The model can suggest a tier for free-text systems, but it is always marked AI-assisted and waits for your confirmation.
- A high-risk result never confirms itself. It routes to a person to sign off.
Ranking candidates is an Annex III(4)(a) employment use, which is high-risk. Confirm to add it to your register.
Every classification makes the next one faster.
A reusable catalog entry connects a tool, a use, a proposed tier, and its reasoning. When a qualified reviewer approves a general pattern, Veillo records that status and can reuse the pattern while keeping customer-specific confirmation visible.
- Reviewed entries carry the rationale and the date. Your register is audit-defensible, not a guess.
- A high-risk result still routes to a person. The catalog speeds up the easy calls, it does not rubber-stamp the hard ones.
- The more the catalog covers, the more of your inventory classifies itself the moment you add a tool.
Entries stay marked pending until a qualified reviewer records a verdict. A reviewed general pattern still is not advice about a customer’s particular circumstances.
Illustrative. Reused patterns still require a customer-specific human confirmation.
Work products generated from the record.
Veillo fills structured templates from your company and system record. You edit, version, review, and export the result, with its review status kept visible.
- Edit in a rich text editor, then export to PDF or DOCX.
- Every edit is a new version; old versions stay for the audit trail.
- Review status and the not-legal-advice boundary stay visible in the exported work product.
Human Oversight Protocol
One set of documents, mapped to the articles that ask for them.
AI Literacy Policy
The baseline training and awareness your staff need to use AI responsibly.
Organisation-wideTransparency Disclosures
Chatbot notices, AI-content labelling, and automated-decision explanations.
Per disclosureHuman Oversight Protocol
Who watches the system, what they watch for, and when they step in.
Per high-risk systemAnnex IV Technical Memo
The technical documentation a high-risk system has to keep on file.
Per high-risk systemRisk Management Procedure
How risks are found, weighed, and reduced over a system's life.
Where high-risk is presentIncident Response Procedure
How a serious incident is logged, escalated, and reported.
Per high-risk systemData Governance Procedure
How training and input data is governed, where that duty applies.
High-risk using personal dataVeillo stores and fills these work products from the organisation’s record. Current templates are labelled with their review state and should be checked before operational use.
Every duty your AI brings, tracked to done.
Documents are only part of it. A high-risk system also pulls in human oversight, record-keeping, worker notices, and more. Veillo reads your classified inventory and lays out exactly which duties apply to you, then tracks each one, so “where are we” becomes a number you can watch climb.
- Built from your real inventory: add a high-risk tool and its duties appear, with the deadline attached.
- Generate a document, confirm an operational step, or mark a duty not applicable. Every change is logged.
- Duties that bind only some deployers, like a fundamental rights assessment, are flagged for you to confirm, never assumed.
The roadmap is general compliance support. Veillo tracks progress and references; it does not decide how the law applies to your organisation.
Illustrative. The duties shown are derived from your classified inventory.
Governance is a practice, not a one-time answer.
Tools, owners, customer questions, and regulatory guidance change. Veillo turns keeping the record current into a quiet routine.
- Regulator updates from the AI Office and national authorities, flagged to the documents they affect.
- A quarterly review prompt, signed off by a named person and recorded.
- An application audit record of material changes, exportable for review.
Know what is due, and when.
The Act phases in over several years. Veillo tracks the dates against your systems, so the next obligation is never a surprise.
The right people, the right access.
Compliance touches legal, ops, and IT. Roles keep each person to what they need, and an external auditor can be given a read-only link to a single entity without seeing the rest.
Running a portfolio? Partner puts every client in one place. See Partner.
Hosting boundaries are published
Server functions are configured for Frankfurt. Database region and global vendor boundaries are stated on the security page.
Tooling, not legal advice
Veillo manages compliance work products and shows their review state. You stay responsible for the final decision.
An audit trail by default
Material actions create separate audit rows with actor and time. The application exposes no edit control for those rows.
Start with the AI your organisation already uses.
Build a first inventory with no signup, or book a working session to see how Veillo turns it into a maintained evidence record.
Free first inventory · no card · see pricing