What Veritome does
Veritome is a single instrument for EU AI Act work. A branching wizard classifies each system against Article 5, Annex I and Annex III; a rules engine derives the exact obligations for your role and risk tier; smart forms and document generators produce your Annex IV technical file, FRIA, Declaration of Conformity and Annex VIII registration; and every record is timestamped and hash-sealed into a regulator-view dossier with a public verify URL.
You can see the output before you sign up. The sample dossier is a real generated file rather than a screenshot of one, which is the test we think you should apply to every vendor in this category — including us.
Why this exists
The EU AI Act is the first comprehensive law of its kind anywhere in the world — several hundred pages of dense legal text with real teeth, carrying fines up to €35 million or 7% of global turnover. Large enterprises responded the way they always do: they hired consultancies at six-figure rates.
SMEs — the businesses that make up most of the European economy — were left to figure it out alone. Veritome closes that gap: it gives a 40-person company the same clarity on its obligations as a multinational, without the price tag and without the consultancy theatre.
Who it’s for
Deployers using third-party AI under Article 26, providers placing high-risk systems on the market, GPAI model providers, and the in-house counsel and law firms advising them. Veritome speaks the Act’s language on every screen — each step anchored to its article — so the same record works for your team, your auditor, and a regulator.
It reaches beyond the EU too. A UK or US organisation is in scope when it places an AI system on the EU market or when the output of that system is used in the Union, and the obligations that follow are identical.
How it works
One guided journey, six phases. Each phase unlocks when the one before it is complete, so you always know the next task, who owns it, and what evidence is still missing.
Who builds it
Veritome is built by Relay Labs Limited, a small, AI-native software studio in Dublin. It’s led by Tomislav, who spent over two decades working in operational roles in regulated industries, first banking, and later healthcare. That background is the point: this is software written by someone who has had to make a documentation framework actually work for busy staff under a real deadline, not theory written from the outside.
In practice that means a product that ships updates in days rather than quarters, prices for SMEs rather than enterprises, and is run by someone you can actually reach. Every feature is shaped by direct conversation with the operators and counsel who use it.
Where we are today
We publish a comparison of twelve tools in this category and assess ourselves against the same criteria as everyone else — corporate disclosure, certifications, weaknesses. These are those facts, unedited. If any of them would disqualify us for you, better that you learn it here than three weeks into an evaluation.
- Legal entity
- Relay Labs Limited
- Registered
- Dublin, Ireland — company number 807438
- Founded
- 30.01.2026
- Team
- One. Bootstrapped, no outside investment.
- Stage
- Pre-public beta, scoping design partners
- Paying customers
- None yet
- Certifications
- None held
- Analyst coverage
- None to date
What that buys you: a product that moves fast and a founder who answers the email. What it costs you: no decade of audit history, no Big Four implementation channel, no certification to hand your procurement team. Both halves are true and you should weigh them.
What we believe
We'd rather tell you exactly where we are than perform maturity we haven't earned. That is why the table below includes the rows most companies leave out.
A checklist that gets completed beats an encyclopaedia that doesn't.
Data stays in the EU. GDPR-native. No US sub-processors for compliance-critical data.
We ship quickly and document everything. Every classification is auditable.
Where your data lives
Every byte of customer data and every AI call stays in the EU/EEA. That is a design constraint, not a marketing line — it is why the assistant runs on a French model rather than the obvious American one.
- Application and database
- Hetzner, Nuremberg (EU)
- Object storage
- Hetzner, Falkenstein (EU)
- Cache
- Upstash, Frankfurt (EU)
- Customer-facing AI (Aria)
- Mistral, Paris (EU)
- Error and product analytics
- Sentry (EU) · PostHog (EU)
Two US processors handle payments and transactional email under standard contractual clauses; neither receives your compliance records. The full list is at sub-processors, the security posture at the Trust Centre, and the data processing agreement is readable before you sign anything.
Questions we get asked
Who is behind Veritome?
Veritome is built by Relay Labs Limited, registered in Dublin, Ireland under company number 807438 and founded on 30.01.2026. It is led by Tomislav, who spent over two decades in operational roles in regulated industries — banking first, then healthcare. It is bootstrapped, with no outside investment, and the team is currently one person.
Where is my data stored?
Entirely in the EU/EEA. The application and its PostgreSQL database run in Nuremberg, object storage in Falkenstein, the cache in Frankfurt, and the customer-facing AI assistant on Mistral in Paris. Error monitoring and product analytics use EU endpoints. The full sub-processor list, including the two US processors used for payments and transactional email under standard contractual clauses, is published at veritome.eu/sub-processors.
Does Veritome hold ISO 27001, ISO 42001 or SOC 2?
No. Veritome holds no certifications today, and says so rather than implying otherwise. What it does have is published sub-processors, documented encryption at rest and in transit, a hash-chained audit trail you can verify yourself, and a Trust Centre that states the current posture rather than a target one. If a certification is a procurement requirement for you, that is a real reason to choose a different vendor and we will say so.
Is Veritome legal advice?
No. Classification under the EU AI Act involves judgement that no software tool resolves definitively, and the documents Veritome generates are drafts built from what you tell it. Have a qualified lawyer review your classification and your conformity documentation before you place a high-risk system on the market. Every classification screen names the article it rests on, which is what makes that review possible rather than guesswork.
What does Veritome not do?
It does not monitor models. There is no drift detection, no bias testing and no runtime enforcement — Veritome documents and tracks obligations, it does not sit in front of your inference calls. It is also not a substitute for legal review, and it does not file anything with a regulator on your behalf. Our published comparison of twelve tools names the vendors that do the things we do not.
How many AI systems can I manage?
The free tier covers one AI system. Paid tiers run from €59 to €699 per month, or €49 to €559 billed annually, with system limits rising by tier. An organisation with more than 25 AI systems will land on the Business plan or need a conversation. Pricing is published in full — you do not need a sales call to find out what it costs.
Beyond Veritome
Relay Labs builds practical software for regulated and operationally complex industries — with a particular focus on healthcare workflows and compliance tooling. Veritome is our flagship, and the bar we hold every other product to.
Something wrong on this page, or a question it doesn’t answer? Tell us — we correct things publicly.