Aria · the assistant inside the register

Drafts, proposes, never files.

Aria answers with the article beside it and prepares the work ahead. Every change waits for a person unless an administrator lets low-stakes changes apply.

The oversight the Act asks forArt. 14Art. 26(2)Art. 50(1)
Aria · TodayPrepared by Aria · 5
Documents · Policy drafts
AI Acceptable Use Policy
Documents · Policy drafts
AI System Impact Assessment Procedure
Art. 26
Suppliers
Mistral AI
Risk register · Risks (Art. 9 plans)
Outcomes that disadvantage a protected group
Art. 10
Obligations · Training assignments
General Staff AI Literacy
Art. 4
Nothing is applied or counted until a person approves it
Illustrative workspace · prepared by the product’s own rules
What Aria does today

Answers, prepares, proposes — and waits for you.

Six things Aria does in a workspace. Live is in the product; coming soon is built and switched off until it is ready.

AskLive

Answers with the article beside it

Law questions are answered from a verified registry; workspace questions from only what you can see and Settings allows.

Art. 50(1)
PrepareLive

Work waiting on the first day

After setup: your suppliers, three policy drafts, the AI-literacy course and up to 6 risks for each classified system.

Art. 4Art. 9
ResearchLive

Supplier fact sheets, from their pages

Aria reads the supplier's homepage and up to 5 linked pages; you approve the fact sheet and record the assessment.

Art. 25(4)
ProposeLive

14 kinds of proposal, one Inbox

Every change Aria would make lands in the Inbox, with what it read and the article behind it.

Art. 14
ApplyLive

Only what an administrator allows

Approve each is the default; Auto-apply covers low-stakes changes on minimal-risk systems, each logged as Aria's.

Art. 26(2)
Keep watchComing soon

A daily look at what changed

Once a day, Aria flags expiring evidence and due reviews: at most 10 proposals, none applied, plus a digest email.

Art. 72
The proposals, as Settings lists them
ClassificationGenerate obligationsTasks & assignmentsEvidence linksReview schedulingDocument draftsStep drafts (programmes)Dossier assemblyRisks (Art. 9 plans)Organisation risksSuppliersSupplier researchTraining assignmentsPolicy drafts
What Aria does — and does not

Proposes, cites, waits for a person.

Both lists are product rules: in the agent test suite, one write applied without approval fails it.

Aria does
Drafts the record

A first pass at a policy, a FRIA or an incident notification, from your register, for a person to edit.

Art. 27
Maps the requirement

Which obligations a system owes, and what each one also counts toward.

Cites the article

Every answer names its provision, checked against the registry; one that does not resolve is flagged.

Proposes the change

Give it a goal, and each write lands in the Inbox as a proposal with its reasoning.

Aria does not
File with a regulator

Incident notifications, EU database registration and dossier submissions stay manual; Aria will not even propose sending one.

Art. 73
Apply a change on its own

Approve each is the default; classification and changes to a high-risk system always need a named person's sign-off.

Art. 14
Give legal advice

Aria is decision support, not legal advice: confirm with counsel, and the product records who confirmed.

Learn from your data

Conversations are not used to train the model, and Aria does not browse the web mid-conversation.

One page in the product

Today · Ask · Run · Inbox · Activity · Settings

Today opens first: what Aria prepared, what it applied under Auto-apply and what waits on you.

Inbox

Every proposal in one place.

Whatever produced it, a proposal waits here with what Aria read and proposes, until someone applies or dismisses it.

  • Apply writes the record and the audit line together
  • Where the floor says sign-off, the button reads Review & sign
  • Filter by source: runs, chat, signals
Art. 14Art. 26(2)
Aria · Inbox3 waiting
ClassificationFrom a run
Classify Recruitment assistant as high-risk
Annex III(4)(a)Art. 6(2)
Review schedulingFrom a run
Schedule the next review of the support chatbot
Art. 50(1)
Evidence linksFrom chat
Link the published AI notice to the support chatbot
Art. 50(1)
Illustrative proposals · try them, nothing is saved
Ask

An answer, with its article.

Ask in plain language or against a document you attach; the top-bar drawer knows the page you are on.

  • Citations always on: the toggle to drop them was removed
  • Attach PDF, DOCX, TXT, MD or CSV
  • Conversation history is off by default
Art. 50(1)
Aria · AskCitations always on
Art. 26
What are my obligations as a high-risk AI deployer?
Annex IV
How do I complete an Annex IV technical file?
Art. 14
What human oversight controls do I need to put in place?
Art. 27
How do I perform a fundamental rights impact assessment?
What are my obligations as a high-risk AI deployer?

As a deployer of a high-risk system, 13 obligations apply. The core of Art. 26:

  • Art. 26(1)Use system per provider's instructions for use
  • Art. 26(2)Assign human oversight person(s)
  • Art. 26(5)Monitor operation; suspend & notify on serious risk
PostureInformational, not legal advice — confirm with qualified counsel.
Illustrative conversation · the obligations are the engine’s
Settings

What it reads, how far it goes.

Knowledge follows Frameworks: enable ISO/IEC 42001 and its corpus grounds Aria, with no second list to sync.

  • Team names and document titles stay off by default
  • Anonymise system names before anything reaches the model
  • Autonomy per capability, with the policy floor on each row
Art. 14GDPR Art. 25
Aria · SettingsDefaults shown
What Aria may read
Obligations and due dates
Your systems’ classifications
Team member names
Evidence and document titles
Hide system names from the model
What it knows · follows Frameworks
EU AI ActBinding law · always groundedGrounded
GDPRFramework onGrounded
ISO 42001Framework onGrounded
NIST AI RMFFramework offOff
Try the switches · nothing is saved
Run

Give Aria a goal.

“Review my unclassified systems and propose classifications.” Aria works inside the run’s scope and sends what it proposes to the Inbox.

Activity

What Aria did, with outcomes.

Every run and proposal, with an outcome an auditor can read; a run that produced nothing says so.

AppliedDismissedIn inboxIn inbox · 3No proposalsFailed · timed out
Aria · RunScope: this workspace
Review my unclassified systems and propose classifications.
Proposed · Classification
Art. 6(2)Recruitment assistant: high-riskFloor: sign-off required · always
Art. 50(1)Support chatbot: limited riskFloor: sign-off required · always
Invoice text extraction: minimal riskFloor: sign-off required · always
ActivityIn inbox · 3
Nothing applied until a person signs
Illustrative run · the floors and outcome labels are the product’s
The autonomy model

Two settings. One floor that cannot be lowered.

Approve each queues every change for a person; Auto-apply applies low-stakes changes and logs them. Neither goes below the floor.

Stakes
When
The floor
Low stakes
A routine change on a minimal-risk system.
Low stakes · candidate for auto-apply
Medium stakes
A limited-risk system, or one whose tier is not yet known.
Floor: needs approval
High stakes
Any classification, or any change to a high-risk or prohibited system.
Floor: sign-off required · always
Regulator-facing
An incident notification, EU database registration or dossier submission.
Manual only

The floor is the Act’s: a competent person oversees a high-risk system, and the provider, not software, reports a serious incident.

Art. 14Art. 26(2)Art. 73

Auto-apply never acts beyond the asker’s role, and background work (the first run, the risk map, supplier research) is never applied.

Aria · SettingsAutonomy
On a system classified
Minimal
ClassificationAlways needs sign-offNamed sign-off
Tasks & assignments
Waits in the Inbox
Evidence links
Waits in the Inbox
Document drafts
Waits in the Inbox
Try it: switch a row to Auto-apply, then make the system high-risk. The product’s own policy decides each outcome · nothing is saved.
Aria for visitorsComing soon

Ask Aria on our public pages, without an account.

Coming to the Help Centre and the trust page: answers from public content only, with citations. It never sees a workspace.

  • No account and no history kept: the browser holds the thread
  • Up to 20 questions a day per visitor, paid for by Veritome
  • The same EU-hosted model and citation check as the product
Help Centre · Ask AriaComing soon
What does Article 4 of the AI Act require?
Art. 4AI literacy

Take measures to support the development of AI literacy of staff and others dealing with AI systems on your behalf, taking into account their knowledge, experience, education and training, the context of use and the persons on whom the systems are used.

Free in the Academy: General Staff AI Literacy

No accountPublic pages only · 20 questions a day
Illustrative conversation · the article and the course are real
Built in the open

An AI system, documented the way yours will be.

Aria is an AI system, so we document it the way we ask you to document yours.

The model
Mistral Small, served from Paris

Configuration, not training; Mistral holds the model-provider duties, Veritome the system-provider ones.

The data
Only the context you allow

Your prompt, attachments, the context you leave on and retrieved passages, under a data-processing agreement, not used for training.

The tests
7 suites · 124 cases

Latest published run, Eval 12 on 02.09.2026: 20/20 answers, 0 forbidden outcomes; a sample of every suite is published.

AI System IDArt. 50
Aria
ProviderRelay Labs Ltd
Role under the EU AI ActProvider of an AI system
Base modelMistral
Card version / date1.2 · 06.09.2026
Risk classificationLimited risk
Tested7 suites · 124 cases
Latest published run: Eval 12, 02.09.2026 · 20/20 answers · 0 forbidden outcomes
Published, the way yours can be/verify/system/aria
How Aria is built and tested →Aria’s public AI System ID →
Questions

Straight answers about Aria.

What does Aria actually do inside Veritome?

Aria drafts, maps and cites from your register, prepares a new workspace from your setup answers and researches suppliers from their own pages. Any change lands in its Inbox for a person to apply or dismiss.

Can I ask Aria something without an account?

Soon. Aria is coming to the Help Centre and the trust page for visitors: no account, public content only, the same citation check, up to 20 questions a day. It never sees a workspace.

Can Aria change something without me?

Not by default. Approve each queues every change for a person. Switch a capability to Auto-apply and only low-stakes changes apply, each logged. Classification and anything on a high-risk system always need sign-off, and regulator-facing actions are never automated.

Which model does Aria run on, and where?

Mistral Small, served by Mistral AI from Paris under a data-processing agreement; the application and its database run on Hetzner in Nuremberg. Prompts are not used to train the model. The transparency page and sub-processor register have the rest.

What does Aria know?

The EU AI Act and its recitals, Veritome's regulatory registry, official guidance, the record templates and the corpus of every framework you have enabled. The EU AI Act is always on.

Is Aria legal advice?

No. Aria is informational decision support. Every substantive answer asks you to confirm compliance decisions with qualified counsel, and your audit trail carries the person who confirmed, not Aria's suggestion.

Is Aria itself governed under the EU AI Act?

Yes. Aria is an AI system, so it carries the Art. 50 disclosure on every screen and publishes its own AI System ID card, the same card the product asks you to publish for yours.

More in the help centre: Ask Aria — what the assistant can and can’t do. Aria’s legal notice is the AI Transparency Notice.