Competitor profile

Modulos vs Acompli: product and service comparison

Modulos is profiled first using its public positioning: Dedicated AI-governance (GRC) platform for the EU AI Act, ISO 42001 and NIST AI RMF, with multi-framework control mapping and quantified AI risk. The page then maps product and service coverage against Acompli so buyers can see overlap, gaps and specialist strengths.

Book a walkthroughView all comparisons
Modulos alternativeAI governanceEU AI ActISO 42001DPIA
Fit

Who each option is best for, and where either supplier is deliberately narrower.

Evidence

Which public claims, review signals, caveats and capability rows are evidenced.

Operations

How much work it takes to implement, maintain and export the privacy record.

Decision

The questions a privacy team should ask before switching or shortlisting.

On this page

Key takeaways

  • Modulos public market lane: Dedicated AI-governance (GRC) platform for the EU AI Act, ISO 42001 and NIST AI RMF, with multi-framework control mapping and quantified AI risk.
  • Modulos best-fit buyer: Large and regulated organisations - financial services, telecommunications, transport, utilities, defence - deploying high-risk or many AI systems that need multi-framework AI governance, monetary risk quantification and runtime evidence.
  • Modulos published strengths include A Governance Graph that maps one control across 13+ AI frameworks - EU AI Act, ISO 42001, ISO 23894, NIST AI RMF, ISO 27001, DORA, NIS2 - so a single control satisfies many frameworks at once; Acompli's AI register is scoped to a privacy programme, not a multi-framework AI-control library.
  • The capability rows use public-documentation signals: "Y" means publicly documented, and "N" means not publicly confirmed.

01Modulos profile

What Modulos provides

Modulos AG (Zurich, Switzerland) is an ETH Zurich spin-off founded in 2018 that positions itself as a Responsible AI Governance platform for regulated enterprises. Its Governance Graph connects frameworks, requirements, controls, evidence and policies into a single queryable model so that one well-designed control can satisfy many frameworks at once - Modulos cites support for 13+ frameworks including the EU AI Act, ISO 42001, ISO 23894, NIST AI RMF, ISO 27001, GDPR-as-a-framework, DORA and NIS2. It is the first AI-governance platform to receive ISO 42001 product conformity certification (issued by CertX) and reports SOC 2 Type II, with SaaS or private-cloud/VPC deployment and multiple data-residency regions (EU, US, UAE, Singapore).

Modulos is demo-led and does not publish plan prices on its pricing page. It advertises a free Starter plan (one AI-app project, single user) for exploration, a Team plan (unlimited users and frameworks) and a fully customisable Enterprise plan, all routed through a demo request. Third-party aggregators (Capterra, GetApp) surface a nominal starting figure that reads as an unverified placeholder rather than a real list price, and both show zero user reviews.

SignalDetails
Market laneDedicated AI-governance (GRC) platform for the EU AI Act, ISO 42001 and NIST AI RMF, with multi-framework control mapping and quantified AI risk.
Best-fit buyerLarge and regulated organisations - financial services, telecommunications, transport, utilities, defence - deploying high-risk or many AI systems that need multi-framework AI governance, monetary risk quantification and runtime evidence.
Ratings / pricing signalSwiss (Zurich) vendor; ISO 42001 product-certified and SOC 2 Type II. Demo-led pricing with a free Starter tier, plus Team and Enterprise plans quoted on request; no public list price. Aggregator ratings are effectively unrated (zero reviews on Capterra and GetApp as of 1 July 2026).
Deployment / operating modelCloud SaaS with optional private-cloud/VPC deployment and EU/US/UAE/Singapore data residency; connects to existing tools (GitHub, Bitbucket, Azure, AWS, Confluence, Jira, Prometheus, Datadog, MLflow) via REST API and Python SDK rather than ingesting raw data.

02Official website signals

What Modulos emphasises on its own website

Modulos positions itself as an AI governance, risk and compliance platform for EU AI Act, ISO 42001 and related frameworks.

Modulos official website

Open the official Modulos source used for this profile refresh.

Explore
  • Official pages emphasise a Governance Graph, cross-framework controls, risk quantification, policy approval, vendor review and evidence workflows.
  • The public lane is dedicated AI GRC with strong EU AI Act and ISO 42001 positioning.
  • Modulos is strongest where the buyer needs full AI governance and control mapping rather than privacy-record administration.

03Published strengths

Modulos products, services and stated strengths

A fair comparison names what the other platform does well. Modulos is a serious, well-engineered AI-governance platform, and for organisations whose primary job is deep, model-level AI-systems engineering - automated discovery, model testing, monetary risk quantification and a multi-framework control graph - it is the stronger choice. Acompli is also a first-class EU AI Act governance platform; it takes a different approach, connecting AI Act governance to the GDPR privacy programme rather than doing Modulos's specialist AI-engineering work.

  • A Governance Graph that maps one control across 13+ AI frameworks - EU AI Act, ISO 42001, ISO 23894, NIST AI RMF, ISO 27001, DORA, NIS2 - so a single control satisfies many frameworks at once; Acompli's AI register is scoped to a privacy programme, not a multi-framework AI-control library.
  • Monetary AI-risk quantification - from risk matrices to Monte Carlo with VaR/CVaR - so boards and audit committees see AI risk in EUR/CHF/USD rather than red/amber/green heatmaps.
  • AI agents (Scout, Control Assessment, Evidence and Risk) plus runtime inspection that links production test results back to controls, reducing per-control assessment from hours to minutes with human review.
  • First-mover ISO 42001 product conformity certification (CertX) and SOC 2 Type II, with private-cloud/VPC deployment and multi-region data residency - assurance signals aimed squarely at regulated AI deployments.

04Sourced 2025-2026 signals

What's new at Modulos (2025-2026, sourced)

These sourced updates were researched on 2026-07-05 and are listed separately from the live comparison table so existing profile claims remain unchanged.

Recent developmentSource: modulos.ai

Modulos closed a CHF 8.7 million pre-Series A funding round, announced 22 July 2025, bringing its total funding to CHF 16.4 million; the company said the capital would scale the platform ahead of the EU AI Act's August 2026 enforcement deadline. No individual investors were named in the release.

Market positioning nuanceSource: modulos.ai

Modulos was named an "Honorable Mention" (not Leader or Visionary) in the inaugural Gartner Magic Quadrant for AI Governance Platforms, published 16 June 2026 and announced by Modulos on 18 June 2026 -- a lower analyst-recognition tier than peers such as IBM (Leader) or OneTrust and ModelOp (Visionary) in the same report.

CertificationSource: modulos.ai

Modulos AG's own press-release archive dates its SOC 2 Type 2 certification announcement to 7 October 2025 ("Modulos AG Achieves SOC 2 Type 2 Certification, Reinforcing Commitment to Enterprise Security and Trust"), giving a specific timestamp for the SOC 2 Type II claim the existing file already states as current fact without a date.

Additional capabilitySource: modulos.ai

Modulos published a named customer case study: JobCloud AG (operator of Switzerland's jobs.ch, jobup.ch and JobScout24.ch, serving 49,000+ companies) selected Modulos to inventory and risk-classify its candidate-ranking, application-filtering and job-matching AI systems -- which fall under the EU AI Act's Annex III high-risk employment category -- and to build the required technical documentation and human-oversight controls.

Market positioning nuanceSource: modulos.ai

Modulos publishes its own head-to-head comparison pages against a broader competitor set than the existing file lists, including Vanta and OneTrust (not just AI-governance pure-plays like Credo AI). Its Modulos-vs-Vanta page frames Vanta as a startup/scale-up SOC 2 and ISO 27001 audit-automation platform that has bolted on AI-framework support, versus Modulos's ISO 42001/EU-AI-Act-native depth including CE-marking workflow support that it says Vanta refers out to specialists.

05Comparison context

Modulos alternatives

Modulos is publicly positioned in this market lane: Dedicated AI-governance (GRC) platform for the EU AI Act, ISO 42001 and NIST AI RMF, with multi-framework control mapping and quantified AI risk.

This page profiles Modulos's stated product and service coverage, best-fit buyer, rating and pricing signals, and published strengths before comparing where Acompli overlaps.

"Y" means publicly documented, while "N" means not publicly confirmed rather than proof that a supplier cannot provide it.

06At a glance

Modulos vs Acompli at a glance

This page profiles Modulos first, then compares public product and service coverage so buyers can decide what fits their own requirement.

Decision questionModulosAcompli
Best fitLarge and regulated organisations deploying AI systems that need multi-framework AI governance, quantified AI risk and runtime evidence in one connected graph.Irish, UK and EU teams that need EU AI Act governance - AI-system register, risk classification, conformity/assessment and human-approved records - connected to RoPA, DPIA, risk and vendor records, with evidence packs and a per-entity DPC/ICO export.
Operating modelA dedicated AI-governance platform: a Governance Graph mapping one control across many AI frameworks, monetary risk quantification, AI agents and runtime inspection.EU AI Act governance - an AI-system register, risk classification, conformity/assessment and human-approved records - connected to RoPA, DPIA, DSAR, risk, vendors and data mapping, each record traceable to its evidence.
When to choose itChoose Modulos when the main problem is governing AI systems across the EU AI Act, ISO 42001 and NIST AI RMF with quantified risk and production-runtime evidence.Choose Acompli when you want EU AI Act governance - classifying AI systems, assessing them and keeping human-approved records - connected to the wider privacy programme so AI systems, DPIAs, RoPA, suppliers and risk decisions stay defensible for the DPC or ICO.

07Capability comparison

Modulos product and service coverage compared with Acompli

Y means a meaningful product, module, feature or service was publicly documented at the time of writing.

* "N" means this capability was not publicly confirmed at the time of writing - not proof the vendor lacks it. "Y" means it was publicly documented. Confirm current features directly with each vendor.
CapabilityModulosAcompli
DPIA/PIA assessmentsNY
RoPA / Article 30NY
DSAR / privacy rightsNN
Data mappingNY
Vendor riskYY
Privacy riskNY
AI governanceYY
Consent managementNN
Cookie/tracker scanningNN
Breach/incident managementNN
Retention managementNY
Policy/notice managementYN
Training moduleNN
Approval workflowsYY
Audit trailYY
Role-based access controlYY
Multi-entity supportYY
Spreadsheet importNY
PDF/CSV/Excel exportYY
Public pricingNN

08Ireland & UK

Modulos vs Acompli for the EU AI Act, ISO 42001 and GDPR in Ireland and the UK

Both platforms govern the EU AI Act, but they take different approaches. Modulos governs AI systems as a standalone engineering discipline - automated discovery, multi-framework control mapping, monetary risk quantification and runtime evidence across the EU AI Act, ISO 42001 and NIST AI RMF - which is exactly what a large AI-deploying enterprise needs. Acompli governs the EU AI Act from inside the GDPR privacy programme built around the Irish DPC and UK ICO: an AI system is registered, risk-classified and assessed, and it links to the DPIA, the Article 30 record and the personal data involved, so AI Act compliance and privacy compliance share one defensible evidence trail.

For both Modulos and Acompli, buyers should ask to see entity-scoped exports, reviewer history, source evidence and how EU GDPR and UK GDPR records are separated in practice.

  • EU GDPR Article 30(1) and Article 30(2) controller and processor records.
  • UK GDPR Article 30 documentation and ICO guidance fit.
  • Irish DPC accountability expectations and exportable evidence for each legal entity.

09Shortlisting notes

When Modulos belongs on the shortlist

Modulos should remain on the shortlist when its published market lane, product strengths and buyer fit match the requirement.

Acompli should be evaluated only where its own workflow coverage matches the requirement; this page is intended to show overlap and gaps, not to force a universal replacement narrative.

  • Shortlist Modulos when the main problem is governing AI systems across the EU AI Act, ISO 42001 and NIST AI RMF with quantified risk and production-runtime evidence.
  • Shortlist Acompli when you want EU AI Act governance - classifying AI systems, assessing them and keeping human-approved records - connected to the wider privacy programme so AI systems, DPIAs, RoPA, suppliers and risk decisions stay defensible for the DPC or ICO.
  • Ask each supplier to demonstrate the same workflow using current product screens, exports, review history and implementation assumptions.

Comparison FAQ

Modulos questions answered

What is Modulos?

Modulos is profiled here in this market lane: Dedicated AI-governance (GRC) platform for the EU AI Act, ISO 42001 and NIST AI RMF, with multi-framework control mapping and quantified AI risk. Modulos AG (Zurich, Switzerland) is an ETH Zurich spin-off founded in 2018 that positions itself as a Responsible AI Governance platform for regulated enterprises. Its Governance Graph connects frameworks, requirements, controls, evidence and policies into a single queryable model so that one well-designed control can satisfy many frameworks at once - Modulos cites support for 13+ frameworks including the EU AI Act, ISO 42001, ISO 23894, NIST AI RMF, ISO 27001, GDPR-as-a-framework, DORA and NIS2. It is the first AI-governance platform to receive ISO 42001 product conformity certification (issued by CertX) and reports SOC 2 Type II, with SaaS or private-cloud/VPC deployment and multiple data-residency regions (EU, US, UAE, Singapore).

What does Modulos provide?

Modulos provides the products, services or modules publicly evidenced in the capability table on this page. The table covers RoPA, DPIA/PIA assessments, DSAR/privacy rights, data mapping, vendor risk, privacy risk, AI governance, consent, cookie scanning, breach, retention, policy, training, workflow, audit and export signals.

Who is Modulos best suited for?

Modulos is best suited for large and regulated organisations - financial services, telecommunications, transport, utilities, defence - deploying high-risk or many AI systems that need multi-framework AI governance, monetary risk quantification and runtime evidence. Buyers should still verify current product scope, service scope, contract terms and implementation requirements directly with Modulos.

What are Modulos's main product or service strengths?

Modulos's published strengths include A Governance Graph that maps one control across 13+ AI frameworks - EU AI Act, ISO 42001, ISO 23894, NIST AI RMF, ISO 27001, DORA, NIS2 - so a single control satisfies many frameworks at once; Acompli's AI register is scoped to a privacy programme, not a multi-framework AI-control library; Monetary AI-risk quantification - from risk matrices to Monte Carlo with VaR/CVaR - so boards and audit committees see AI risk in EUR/CHF/USD rather than red/amber/green heatmaps; AI agents (Scout, Control Assessment, Evidence and Risk) plus runtime inspection that links production test results back to controls, reducing per-control assessment from hours to minutes with human review.

What pricing or buyer-review signal is available for Modulos?

Modulos is demo-led and does not publish plan prices on its pricing page. It advertises a free Starter plan (one AI-app project, single user) for exploration, a Team plan (unlimited users and frameworks) and a fully customisable Enterprise plan, all routed through a demo request. Third-party aggregators (Capterra, GetApp) surface a nominal starting figure that reads as an unverified placeholder rather than a real list price, and both show zero user reviews. Confirm current pricing, ratings, plan limits and service scope directly with Modulos before procurement.

Does Modulos support GDPR Article 30 RoPA?

Not publicly confirmed. Modulos is marked N for RoPA / Article 30 here, meaning public documentation does not clearly confirm it, not proof the supplier cannot provide it. Acompli is marked as publicly evidenced for the same row. Buyers should verify live module scope, service scope and export evidence directly with each supplier before procurement.

Does Modulos support DPIA or privacy assessments?

Not publicly confirmed. Modulos is marked N for DPIA/PIA assessments here, meaning public documentation does not clearly confirm it, not proof the supplier cannot provide it. Acompli is marked as publicly evidenced for the same row. Buyers should verify live module scope, service scope and export evidence directly with each supplier before procurement.

Does Modulos support DSAR or privacy rights workflows?

Not publicly confirmed. Modulos is marked N for DSAR / privacy rights here, meaning public documentation does not clearly confirm it, not proof the supplier cannot provide it. Acompli is marked as not publicly confirmed for the same row. Buyers should verify live module scope, service scope and export evidence directly with each supplier before procurement.

Does Modulos provide data mapping?

Not publicly confirmed. Modulos is marked N for Data mapping here, meaning public documentation does not clearly confirm it, not proof the supplier cannot provide it. Acompli is marked as publicly evidenced for the same row. Buyers should verify live module scope, service scope and export evidence directly with each supplier before procurement.

Does Modulos provide vendor risk or third-party privacy risk management?

Yes. Modulos publicly documents Vendor risk. Acompli is marked as publicly evidenced for the same row. Buyers should verify live module scope, service scope and export evidence directly with each supplier before procurement.

Does Modulos provide consent management or cookie scanning?

Not publicly confirmed. Modulos is marked N for Consent management here, meaning public documentation does not clearly confirm it, not proof the supplier cannot provide it. Not publicly confirmed. Modulos is marked N for Cookie/tracker scanning here, meaning public documentation does not clearly confirm it, not proof the supplier cannot provide it. Acompli is marked as not publicly confirmed for consent management and not publicly confirmed for cookie/tracker scanning, so buyers needing either capability should verify live vendor scope before procurement.

Does Modulos provide AI governance?

Yes. Modulos publicly documents AI governance. Acompli is marked as publicly evidenced for the same row. Buyers should verify live module scope, service scope and export evidence directly with each supplier before procurement.

How should buyers read the Modulos vs Acompli capability table?

The table records public-documentation signals for each supplier. "Y" means a meaningful product, module, feature or service was publicly documented; "N" means it was not publicly confirmed, not proof that the supplier cannot provide it.

What are Modulos alternatives?

Modulos alternatives depend on the buyer's exact requirement, because Modulos's strongest fit is: Choose Modulos when the main problem is governing AI systems across the EU AI Act, ISO 42001 and NIST AI RMF with quantified risk and production-runtime evidence. The shortlist may include broad privacy platforms, GRC tools, specialist consent or DSAR tools, service providers, and Acompli where the buyer needs overlapping privacy-governance workflows shown in the table.

How does Modulos compare with Acompli?

Modulos should be assessed first on its own published fit: Choose Modulos when the main problem is governing AI systems across the EU AI Act, ISO 42001 and NIST AI RMF with quantified risk and production-runtime evidence. Acompli is included as a factual overlap point where the requirement is: Choose Acompli when you want EU AI Act governance - classifying AI systems, assessing them and keeping human-approved records - connected to the wider privacy programme so AI systems, DPIAs, RoPA, suppliers and risk decisions stay defensible for the DPC or ICO. Buyers should ask both suppliers to demonstrate the same workflow with current product screens, exports and implementation assumptions.

When should buyers shortlist Modulos?

Buyers should shortlist Modulos when the main problem is governing AI systems across the EU AI Act, ISO 42001 and NIST AI RMF with quantified risk and production-runtime evidence. They should only compare Acompli for the overlapping requirements shown on this page, and they should keep any specialist supplier that covers a requirement neither platform clearly evidences.

How current is this Modulos profile?

Ratings, pricing, product names, plan limits and service scope can change over time. Treat this as a comparison guide and verify current details with Modulos before procurement.

Acompli answers

Acompli as a Modulos alternative

Who are Modulos's competitors?

Modulos competes in the AI-governance category against platforms such as Credo AI, Holistic AI, Saidot, Trustible and the AI-governance modules of broader GRC suites like OneTrust and IBM. Acompli is also an EU AI Act governance platform, so it competes on AI Act compliance - but it takes a different approach, connecting AI-system registration, risk classification and assessment to the GDPR privacy programme rather than pursuing Modulos's model-level AI-testing and multi-framework control-mapping depth.

Is Acompli a good Modulos alternative?

Yes, for EU AI Act governance connected to GDPR - both are AI Act governance platforms, they just take different approaches. If your goal is deep, model-level AI-systems engineering governance - multi-framework control mapping, monetary AI-risk quantification and runtime inspection - Modulos is purpose-built for that. If your goal is EU AI Act governance - an AI-system register, risk classification and assessment - connected to privacy operations for an Irish, UK or EU team, with human approval and a per-entity DPC/ICO export, Acompli is the stronger fit. The honest comparison is approach-to-approach rather than one being an AI tool and the other not.

Does Acompli replace Modulos?

It depends on the approach you need. Modulos governs AI systems as a standalone engineering discipline across the EU AI Act, ISO 42001, NIST AI RMF, DORA and NIS2, with model-level testing, quantified risk and runtime evidence. Acompli is a first-class EU AI Act governance platform - AI-system register, risk classification, conformity/assessment and human-approved records - connected to the GDPR privacy programme, so for teams that want AI Act governance joined to DPIA and Article 30 it is a genuine alternative. What Acompli does not replace is Modulos's specialist work: model-level bias/robustness testing, automated shadow-AI discovery, monetary risk quantification and the multi-framework control graph.

How do Modulos and Acompli differ?

Both are EU AI Act governance platforms with different approaches. Modulos is a dedicated AI-governance platform: a Governance Graph mapping one control across many AI frameworks, monetary risk quantification, AI agents and model-level runtime inspection, built for large regulated AI deployers. Acompli governs the EU AI Act - an AI-system register, risk classification, conformity/assessment and human-approved records - connected to RoPA, DPIA, privacy risk, vendor risk and data mapping, built around the Irish DPC and UK ICO. Modulos governs AI systems as a standalone engineering discipline; Acompli governs AI systems as part of one connected privacy-and-AI-Act compliance programme.

Does Modulos publish pricing, and does Acompli?

Modulos is demo-led and does not publish plan prices on its pricing page; it advertises a free Starter tier for exploration plus Team and Enterprise plans quoted on request, and third-party aggregators show no confirmed list price. Acompli also prices on its compliance estate — data controllers, legal entities, jurisdictions and integrations — never per seat, and provides pricing on request rather than a public list price, because effort scales with the programme rather than the number of logins.

Is Modulos a GDPR privacy tool with RoPA, DPIA and DSAR?

No. Modulos is an AI-governance platform, not a GDPR privacy-operations tool. It references GDPR as one framework in its multi-framework graph, but it is not built to produce Article 30 records of processing, run DPIAs on processing activities or map personal-data flows. Those are Acompli's core jobs. Teams that need both often run an AI-governance platform for AI-systems depth and a privacy-operations platform for the GDPR record.

What is Modulos's Governance Graph, and does Acompli have an equivalent?

Modulos's Governance Graph is a connected data model that links frameworks, requirements, controls, evidence and policies so that one control can satisfy many AI frameworks at once - its central differentiator. Acompli connects records too, but around provenance: every Article 30 field, DPIA and AI-system entry - including its EU AI Act risk classification - traces back to the approved evidence that produced it. The two connect different things - Modulos connects controls across many AI frameworks; Acompli connects AI-system and privacy records to their source evidence for a defensible, human-approved DPC or ICO export.

Is Modulos ISO 42001 certified?

Yes. Modulos states it is the first AI-governance platform to receive ISO 42001 product conformity certification, issued by the auditor CertX, and reports SOC 2 Type II. That is a genuine strength for organisations standing up an ISO 42001 AI management system. Acompli is a first-class EU AI Act governance platform - AI-system register, risk classification, conformity/assessment and human-approved records - but it does not hold ISO 42001 product certification or offer Modulos's multi-framework AI-control library; its focus is EU AI Act governance connected to the GDPR privacy programme, with AI-system records linked to DPIA and Article 30.

Which is better for the EU AI Act, Modulos or Acompli?

Both govern the EU AI Act; the better fit depends on approach. For deep, model-level AI-systems engineering governance - control mapping alongside ISO 42001 and NIST AI RMF, monetary risk quantification, model testing and runtime evidence - Modulos is purpose-built and stronger. For an Irish, UK or EU team that wants EU AI Act governance - an AI-system register and risk classification, conformity/assessment and human approval - connected to DPIAs and the Article 30 record for the personal data involved, Acompli is the stronger fit. Both are genuine EU AI Act platforms; the choice is which approach matches how you need to govern.

Can Acompli and Modulos be used together?

Yes. Some organisations run Modulos for deep, model-level AI-systems engineering governance - multi-framework controls, risk quantification and runtime evidence - while Acompli governs the EU AI Act inside the privacy programme, maintaining the AI-system register, risk classification and human-approved records linked to DPIA and Article 30 for the DPC or ICO. Because they take different approaches to AI Act governance, they complement rather than duplicate each other, and each keeps its own defensible evidence trail.

What recent certification or analyst signal is available for Modulos?

Modulos AG's own press-release archive dates its SOC 2 Type 2 certification announcement to 7 October 2025 ("Modulos AG Achieves SOC 2 Type 2 Certification, Reinforcing Commitment to Enterprise Security and Trust"), giving a specific timestamp for the SOC 2 Type II claim the existing file already states as current fact without a date.

Acompli overlap

Related Acompli workflows

Assessments

Run DPIAs, LIAs, TIAs, processor reviews and AI Act assessments with templates, AI support and human approval.

Open module

RoPA management

Maintain Article 30 records that stay linked to approved assessments, systems, suppliers and transfers.

Open module

Risk management

Extract candidate risks from approved evidence, assign treatment plans and report on current exposure.

Open module

Compare Modulos and Acompli against a real workflow.

Bring one RoPA, DPIA, vendor, risk or AI-governance requirement and map which parts are covered by Modulos, which parts Acompli covers, and where another specialist may still be needed.

Book a walkthroughSee a sample Evidence Pack

Acompli architecture

One governed foundation. Five connected modules.

Imported systems, suppliers, policies, DPIAs and RoPA spreadsheets become the shared evidence model for assessments, risk, records, third-party oversight and data mapping.

  1. 00FoundationOnboardingImport DPIAs, RoPA spreadsheets, suppliers, systems, policies and documents.
  2. 01AssessAssessmentsRun DPIAs, LIAs, TIAs, processor reviews and AI Act assessments with human approval.
  3. 02DetectRiskExtract candidate risks from approved evidence and assign treatment plans.
  4. 03RecordRoPAMaintain Article 30 records linked to assessments, systems, suppliers and transfers.
  5. 04VendorThird-PartyRecord suppliers once, then reference them across assessments, RoPA, risk and maps.
  6. 05MapData MappingBuild a living view of systems, suppliers, locations, categories and transfers.

Point tools create records. Acompli connects them.