Founding rate: 30% off your plan for as long as you stay subscribed, for any organisation created before 01.12.2026. Applied automatically; no code needed. Add-ons are never discounted. Prices exclude VAT. See the Refund Policy.
What comes with every plan, Classify included.
The other ways to get this done.
Each has its place. Veritome is built to stay current when your systems, your team and the rules change.
Two things a plan can be extended with.
No per-framework fees anywhere else. ISO/IEC 42001 and the NIST AI RMF crosswalk are included from Govern up. The GDPR is included on every plan.
| Add-on | Price | Available on |
|---|---|---|
| Extra high-risk system | €49 / month each | Any plan that includes at least one high-risk system (Govern and above) |
| ISO/IEC 27001 programme | €199 / month | Govern. Already included in Manage and Enterprise |
Management system programmes.
ISO/IEC 42001 and the NIST AI RMF crosswalk come with Govern and above; ISO/IEC 27001 is the one programme sold separately, and it is part of Manage. Shared policies and evidence are credited across your EU AI Act, GDPR and ISO work, with the basis for each reuse shown so you can check it.
ISO/IEC 42001, ISO/IEC 27001 and NIST AI RMF cross-mapping lands with the full launch, planned for late November 2026.
Veritome is not a certification body and does not audit or certify. Certification is granted by an accredited certification body following its own audit. Auditor access means read-only access for your auditor — an audit is not included. Obligation sets and mappings are drafts for your review; they are not legal advice and do not establish that a requirement has been met.
Every detail across the plans.
The rows that decide between plans first, every row one click away. A dash means the plan does not include it.
| Feature | Classify | Starter | Govern | Manage | Enterprise |
|---|---|---|---|---|---|
| Limits | |||||
| AI systems in the register | 3 | 5 | 25 | Unlimited | Unlimited |
| High-risk systems | — | — | 1 | 3 + add-on | Unlimited |
| Users | 2 | 5 | 15 | Unlimited | Unlimited |
| Aria and AI-assisted assessments per month | 5 | 50 | 250 | Fair use | Fair use |
| Register and assessment | |||||
| Inventory, role and risk classification, with article citations | ✓ | ✓ | ✓ | ✓ | ✓ |
| Working obligation sets with owners, dates and evidence | — | Non-high-risk | All | All | All |
| PDF / DOCX export | Watermarked PDF | PDF and DOCX | PDF and DOCX | PDF and DOCX | |
| Evidence connectors: Google Drive, SharePoint / OneDrive, GitHub, Jira | — | — | 1 | All four | All four |
| Frameworks | |||||
| EU AI Act literacy (Art. 4) and transparency (Art. 50) | – | ✓ | ✓ | ✓ | ✓ |
| High-risk provider programme (Arts. 9–15) | – | – | – | ✓ | ✓ |
| GDPR: records of processing, DPIA, transfers, data subject requests | ✓ | ✓ | ✓ | ✓ | ✓ |
| ISO/IEC 42001 programme | – | – | ✓ | ✓ | ✓ |
| ISO/IEC 27001 programme | — | — | Add-on | Included | Included |
| Operations and support | |||||
| Single sign-on and SCIM provisioning | – | – | – | ✓ | ✓ |
| Support | Help centre | Email, 2 business days | Email, 1 business day | Priority, 1 business day | Priority, 1 business day |
- Enterprise is Manage plus multi-entity, API access and a custom Data Processing Agreement. There is no self-serve checkout, so talk to us.
- Prices exclude VAT. Irish business customers are charged Irish VAT. EU business customers who supply a VAT number validated through VIES are reverse-charged.
Questions about EU AI Act compliance software pricing
Can I switch plans at any time?
Yes. Upgrade or downgrade at any time from the billing portal. Upgrades take effect immediately and are charged pro rata for the rest of your period; downgrades take effect at the end of the current billing cycle. The Refund Policy says what is and is not refundable.
What counts as one AI system?
One AI system as placed on the market or put into service. Versions, environments and deployments of the same system under the same owner count as one. Archived systems do not count against your allowance. Your plan sets how many systems the register holds (three on Classify, five on Starter, twenty-five on Govern, unlimited from Manage) and how many of them may be high-risk.
Which plan do I need?
Your obligations depend on your role, the system's classification and how it is used. Veritome generates the set that applies to each system you register, and you can do that on Classify for free before you decide. One or two systems and none of them high-risk: Starter. A governance programme across several systems and frameworks, with one high-risk system: Govern. Any provider duties on a high-risk system, or more than one: Manage.
What if I have more than one high-risk system?
Govern includes one and Manage includes three. Each additional high-risk system is €49 a month on either plan, because the second system reuses your quality management system, your policies and most of the technical file structure. Enterprise has no limit.
Which evidence connectors and sign-in options come with each plan?
Govern includes one evidence connector: Google Drive, SharePoint / OneDrive, GitHub or Jira. Manage and Enterprise include all four, plus single sign-on over OIDC with SCIM provisioning. Every connector is read-only, and what it brings in waits for a person's review like any other evidence.
What is the founding rate?
30% off your plan for as long as you stay subscribed, for any organisation created before 01.12.2026. It is applied to your invoice automatically, with no code to enter, and it stacks with annual billing: ten months for twelve first, then the discount. Add-ons are never discounted.
Do I need the ISO/IEC 42001 programme to satisfy Article 17?
No. The quality management system required by Article 17 is included in Manage. It is a statutory duty for high-risk providers, and we do not sell it back to you. The ISO/IEC 42001 programme is the certifiable management system around it: the Annex A controls, the Statement of Applicability, the internal audit and management review records an accredited certification body will ask to see. It is included from Govern up.
Is my data stored in the EU?
Yes. Your compliance data is stored and processed in the EEA: the application, database and object storage run on Hetzner in Germany, and Aria's AI processing runs on Mistral in France. We have no US entity. Some supporting services can process data in the United States under EU Standard Contractual Clauses: payments, Google and Microsoft sign-in, Google Analytics (only with your consent) and the optional evidence connectors. Transactional email is sent from Plunk in Germany through AWS SES, whose region Plunk does not state. Every one is named in our sub-processor register.
How does annual billing work?
Annual plans are billed up front and charge 10 months for 12, so 2 months are free. A founding organisation gets its 30% on top of that.
Does Veritome certify us, or audit us?
No. Veritome is not a certification body and does not audit or certify. Certification is granted by an accredited certification body following its own audit. What we provide is the workspace, the records and the evidence trail that audit runs against, plus a read-only seat so your auditor can read them.
Does Veritome provide legal advice?
No. Veritome is EU AI Act compliance software. It structures your documentation, classification and obligation mapping against the Act's requirements. Obligation sets and mappings are drafts for your review; they do not establish that a requirement has been met. Consult an EU AI Act specialist for complex legal questions.
What happens when new EU AI Act guidance is published?
We monitor the EU AI Office, the European Commission and the relevant supervisory authorities, and update the regulatory registry the software runs on. Updates reach you automatically, with nothing for you to install.
Can I export my compliance documentation?
Yes. Classify exports a watermarked classification report. From Starter onwards the documents you generate (assessments, transparency notices, incident reports) export as PDF without the watermark, to keep for your records, review with counsel, or use as the basis of a submission you make yourself. From Govern, policies also export as DOCX and the evidence pack export is included; the Annex IV technical file is part of Manage.