GDPR & EU AI Act compliance platform

Living records.
Structured updates.
Human-reviewed outputs.

One platform for assessments, risk registers, and Article 30 records — connected to the systems, suppliers, and evidence behind them.

Get started See how it works

The Platform · 06 Modules

One foundation.
Every module feeds the next.

Onboarding imports your systems, suppliers and policies once. Assessments, risk, records, third-party and DSAR all read from that same knowledge base — so evidence, entities and controls stay consistent downstream.

Shared knowledge baseHuman-reviewed outputsOne licence

00 · Foundation7–14 days → operational

Onboarding

Your Foundation

Import, connect, classify — operational in days. Systems, suppliers and policies land in a single, queryable knowledge base that every module below reads from.

01 / Assess

Assessments

GDPR & EU AI Act

AI-generated responses grounded in your knowledge base, with per-sentence verification.

Per-sentence citations

02 / Detect

Risk

Privacy Risk

Risks extracted from responses with evidence citations and human preview before publishing.

Reviewer gate

03 / Record

RoPA

Article 30 Governance

Article 30 fields mapped at template level, populated from responses, with automatic compliance gating.

Version-controlled

04 / Vendor

Third-Party

Processor & Transfer Risk

Vendor research and due diligence feeding directly into your knowledge base.

Auto-linked

05 / Map

Data Mapping

Organisational Registry

Systems, suppliers, locations, and data categories with AI extraction and entity linking.

Canonical entities

06 / Respond

DSAR

Subject Access Requests

Intake, identity verification, search, redaction, and disclosure in one auditable workflow.

SLA tracked

Evidence-grounded compliance, not template-filling.

One platformOne licenceEvery module feeds the next

The workflow

Seven stages from knowledge to compliance

Each stage builds on the last. Each completed assessment makes the next one better. This is the intelligent data lifecycle.

Choose your assessment

Every workflow begins by selecting or building an assessment template. The AI template builder auto-tags every RoPA-affiliated field. Article 30 mapping happens before a single answer is written.

The AI template builder automatically tags every RoPA-affiliated question field as it generates your template. Article 30 fields such as legal basis, data categories, recipients, and retention periods are mapped before a single answer is written, so your Records of Processing Activities populate without any manual configuration.

Assessment Library

DPIAs, LIAs, TIAs, vendor due diligence and other workflows, pre-built and ready to run.

AI Template Builder

Describe the processing activity and Acompli generates a tailored assessment with RoPA fields pre-tagged.

RoPA Auto-tagging

Article 30 fields are identified and mapped at template level with no manual setup.

Connect your organisation's knowledge

Before a single answer is generated, Acompli learns your world. Three knowledge bases feed every assessment, each a distinct, grounded source of truth.

Three knowledge bases feed every assessment: project-level documents, the organisational registry, and the assessor's own contextual input. Each is searchable, grounded, and kept current.

Knowledge

Project DocumentsContracts, DPAs, retention schedules, and supporting files parsed and indexed.

Org RegistrySystems, processors, locations, data categories, and contracts.

Assessment ContextWhat the assessor describes about the processing activity itself.

Three agents assemble the evidence

Three specialist agents search your data in parallel and compile a structured intelligence brief. All three are read-only by design.

KB Intelligence

Searches the registry of systems, processors, and locations to build a relevance map for each question.

Read-only · KB, entities, regulatory docs

Document Analyst

Searches project docs and images including contracts, DPAs, architecture diagrams, and consent records.

Read-only · Documents, images

Archive Researcher

Searches past assessments and DPO-approved precedents for historical context.

Read-only · Archive, precedents

Compiled →Structured intelligence brief staged to the project document library

AI writes with your evidence in front of it

The model runs with full context: registry, project documents including the intelligence brief, and approved precedents. Every answer is grounded in your data and then verified.

DPIA — Employee Monitoring System

Processing purpose & lawful basisGrounded

Data categories & retention periodsGrounded

Necessity & proportionalityReview

Transfer impact assessmentPrecedent

Rights & freedoms risk analysisGrounded

Risk mitigation measures3 Flagged

Advisory co-pilotExplains what “good” looks like for every question

Polishes wording on demand, in bulk or per question

Every claim checked against your records

Post-generation verification. Each claim is checked against two layers of your own data. Ungrounded claims are flagged rather than silently passed through.

Layer 1 — Entity Registry

Named systems, vendors, and locations are verified against your registry. Unregistered entities are flagged.

Layer 2 — Uploaded Documents

Retention, safeguards, and legal mechanisms are searched and matched back to document sections.

Sensitive Claim Scrutiny

Article 6, Article 9, international transfers, and data subject rights get mandatory additional review.

Sensitive claims such as legal basis, special category processing, international transfers, and data subject rights receive additional scrutiny regardless of their general grounding score.

Review priority queue

FlaggedHighMediumLow

Risks extracted. RoPA drafted. Automatically.

Upon DPO approval, four processes execute simultaneously. Every output carries full provenance so a RoPA record can be traced back to source evidence in one click.

Risk Register

Risks extracted with provenance

Each risk carries severity, category, source assessment, and a link to the original question and answer.

RoPA Records

Article 30 fields auto-populated

Legal basis, data categories, recipients, and retention are populated from responses.

Assessment archived and searchable

AI-generated summary, structured tags, and risk levels are embedded and indexed.

Precedents

Best answers become standards

High-quality answers surface as candidates and the DPO curates which become authoritative.

Every assessment makes the next one better

The programme improves continuously through the compliance work your organisation is already conducting. Context survives people changes. Institutional knowledge compounds.

Compound

Registry

Start your first assessment

See the workflow in action

Run your first assessment with Acompli's full intelligence pipeline. Your organisational knowledge becomes the foundation of every compliance decision.

Get started →Explore the platform

Living records.
Structured updates.
Human-reviewed outputs.

One foundation.
Every module feeds the next.

Onboarding

Assessments

Risk

RoPA

Third-Party

Data Mapping

DSAR

Seven stages from knowledge to compliance

Choose your assessment

Assessment Library

AI Template Builder

RoPA Auto-tagging

Connect your organisation's knowledge

Three agents assemble the evidence

KB Intelligence

Document Analyst

Archive Researcher

AI writes with your evidence in front of it

Every claim checked against your records

Layer 1 — Entity Registry

Layer 2 — Uploaded Documents

Sensitive Claim Scrutiny

Risks extracted. RoPA drafted. Automatically.

Risks extracted with provenance

Article 30 fields auto-populated

Assessment archived and searchable

Best answers become standards

Every assessment makes the next one better

GDPR RoPA Requirements in Ireland and the UK

Council Agrees “AI Omnibus” Mandate: High-Risk Deadlines Pushed to 2027/2028

GDPR Fine Calculator

See the workflow in action

Living records.Structured updates.Human-reviewed outputs.

One foundation.Every module feeds the next.

Onboarding

Assessments

Risk

RoPA

Third-Party

Data Mapping

DSAR

Seven stages from knowledge to compliance

Choose your assessment

Assessment Library

AI Template Builder

RoPA Auto-tagging

Featured resources

GDPR RoPA Requirements in Ireland and the UK

Council Agrees “AI Omnibus” Mandate: High-Risk Deadlines Pushed to 2027/2028

GDPR Fine Calculator

See the workflow in action

Living records.
Structured updates.
Human-reviewed outputs.

One foundation.
Every module feeds the next.