What legal teams ask us for
The same record answers each of these.
What changes for counsel
Built for the conversation that starts ‘show me’.
In practice
Three legal settings, one record.
Use case 01
A boutique firm advising fifty SMEs on EU AI Act readiness.
- One playbook: free check → classification → obligations → evidence.
- The deliverable: a dossier PDF with a verify URL.
Annex IV — Technical DocumentationRecruitment assistant
§1Art. 11
§2Art. 11
§3Art. 10
§4Art. 15
§5Art. 14
§6Art. 9
§7Art. 15
§8Provider narrative · to write
Sealedsha256sha256 fingerprint e4d4b64e5aeabf734f6512c3249ff428c83229491c30f20c63c233614049e0227 of 8 filled from the register
Illustrative file · the sections are the builder's own; §8 is always yours to write
Use case 02
A diligence team examining an AI-native target.
- The target hands over a verify URL; no portal access needed.
- The hash chain shows nothing was quietly edited.
- Findings feed straight into the warranty schedule.
Audit trailArt. 12 · Art. 72
29.09.2026 09:12Classified AI system
29.09.2026 11:47Updated obligation
29.09.2026 11:51Uploaded evidence
29.09.2026 16:30Signed off the residual risk
SealedDaily anchor · 29.09.2026 · 4 rows
Chained to the day before
Illustrative trail · the anchor is the real hash of these rows
Use case 03
An in-house GC answering a national authority's request.
- The audit log shows every action in the inspection window.
- Phase-gate attestations record exactly when each phase passed.
- The response pack can be put together in a working day.
Quality management systemArt. 17
from the policiesArt. 17(1)
from the monitoring planArt. 17(1)(h)
from the incident procedureArt. 17(1)(i)
from the data recordArt. 17(1)(f)
from the risk planArt. 17(1)(g)
One PDF
Organisation compliance report
sha256sha256 fingerprint c008cbfadd5b9161b70f68cb8fcb441be44ab13e9a046cd8890c7dfcd3443fe3Illustrative system · the parts are Article 17(1)’s
What counsel leans on
Features that hold up when the evidence is examined.
Straight answers
EU AI Act compliance for law firms: questions counsel ask
Is the audit trail tamper-evident?
Yes. Every change is logged with the user, the time and what changed, and the log is hash-chained and anchored daily. A break in the chain is shown, not hidden.
Can a third party check a dossier without an account?
Yes. Every sealed dossier carries a public verify URL, so a regulator, auditor or diligence team reads the seal directly, without portal access.
Can a firm manage several client organisations?
Yes. One firm account holds many client organisations, each with its own systems and obligations, and permissions are enforced at the API.
Does Veritome replace legal review?
No. Classification involves judgement no software resolves definitively, and the documents are drafts built from what the client records. Every screen names its article, so counsel can review the work.