Competitor profile

Saidot vs Acompli: product and service comparison

Saidot is profiled first using its public positioning: Agent-first, graph-based AI-governance platform for the EU AI Act, ISO/IEC 42001 and NIST AI RMF era. The page then maps product and service coverage against Acompli so buyers can see overlap, gaps and specialist strengths.

Book a walkthroughView all comparisons
Saidot alternativeAI governanceEU AI ActAI registerEvidence
Fit

Who each option is best for, and where either supplier is deliberately narrower.

Evidence

Which public claims, review signals, caveats and capability rows are evidenced.

Operations

How much work it takes to implement, maintain and export the privacy record.

Decision

The questions a privacy team should ask before switching or shortlisting.

On this page

Key takeaways

  • Saidot public market lane: Agent-first, graph-based AI-governance platform for the EU AI Act, ISO/IEC 42001 and NIST AI RMF era.
  • Saidot best-fit buyer: Enterprises and public-sector organisations - in the EU or with EU market exposure - that need a dedicated AI-governance platform to inventory, classify, control and test AI systems and agents, with legal, compliance, risk and sourcing teams working alongside AI teams.
  • Saidot published strengths include dedicated, agent-first AI governance built on an expert-curated knowledge graph - 260+ risks, 620+ controls and 110+ policies - where governance applied once inherits automatically to every linked system, agent and model. Acompli's AI register is one record type inside a privacy programme, not a standalone AI-risk graph of this depth.
  • The capability rows use public-documentation signals: "Y" means publicly documented, and "N" means not publicly confirmed.

01Saidot profile

What Saidot provides

Saidot (Helsinki, Finland; founded 2018, CEO and founder Meeri Haataja) is a SaaS AI-governance platform for AI, risk, legal, compliance and sourcing teams. It is agent-first and graph-based: a centralised inventory registers every AI system, model, agent and dataset, and Saidot's knowledge graph links each to the risks, controls and policies that apply, so governance applied once flows to everything connected to it. The curated library spans 260+ risks, 620+ controls, 110+ policies (including ISO/IEC 42001 and NIST AI RMF) and 170+ third-party AI models and products, with native model imports from Azure OpenAI, Azure AI Services, Azure ML and Amazon Bedrock. Named users include the Scottish Government and Deloitte. It is an AI-governance specialist, not a GDPR privacy-operations suite - it does not perform RoPA, DPIA, DSAR, consent, cookie scanning, breach or retention.

Saidot does not publish list prices. Its site describes a subscription model with plans you can change at any time (VAT added by location), and OECD.AI notes an inventory tool available "without seat-based pricing," while getting-started options range from a free trial or self-service onboarding to a facilitated pilot with Saidot's governance experts. Actual figures are demo-led through Get started, Book intro or sales@saidot.ai.

SignalDetails
Market laneAgent-first, graph-based AI-governance platform for the EU AI Act, ISO/IEC 42001 and NIST AI RMF era.
Best-fit buyerEnterprises and public-sector organisations - in the EU or with EU market exposure - that need a dedicated AI-governance platform to inventory, classify, control and test AI systems and agents, with legal, compliance, risk and sourcing teams working alongside AI teams.
Ratings / pricing signalFinnish (Helsinki) vendor, ISO/IEC 27001:2022 certified for its own ISMS. No public list pricing - subscription plans are demo-led via Get started, Book intro or sales@saidot.ai, with a free trial and self-service or facilitated-pilot onboarding. It is inviting reviews on Gartner Peer Insights; coverage on G2 and Capterra is currently thin.
Deployment / operating modelCloud SaaS AI-governance platform with native integrations to Azure OpenAI, Azure AI Services, Azure ML and Amazon Bedrock (auto-imported model cards), a REST API and webhooks, and three MCP servers (Docs, Library, Governance) so AI agents can participate in governance workflows.

02Official website signals

What Saidot emphasises on its own website

Saidot positions itself as a graph-based AI governance platform powered by an expert-curated knowledge graph.

Saidot official website

Open the official Saidot source used for this profile refresh.

Explore
  • Official pages emphasise AI inventory, risks, controls, policies, third-party AI models and graph-based governance.
  • The public lane is dedicated AI governance for organisations managing AI systems and agentic AI.
  • Saidot is strongest where connected AI inventory and AI governance knowledge graphs are the main buying case.

03Published strengths

Saidot products, services and stated strengths

A fair comparison names what the other platform does well. Saidot is a serious, purpose-built AI-governance platform, and for teams whose core problem is a specialist AI-governance discipline - shadow-AI discovery, an agent catalogue, model-level testing and an expert knowledge graph - it does specialist work that Acompli does not attempt.

  • Dedicated, agent-first AI governance built on an expert-curated knowledge graph - 260+ risks, 620+ controls and 110+ policies - where governance applied once inherits automatically to every linked system, agent and model. Acompli's AI register is one record type inside a privacy programme, not a standalone AI-risk graph of this depth.
  • Native AI-stack integrations: automatic model imports from Azure OpenAI, Azure AI Services, Azure ML and Amazon Bedrock, a real agent catalogue (Microsoft Foundry Agent Service, Amazon Bedrock) with per-tool risk classification, and MCP servers that let your own AI agents draft risk assessments.
  • Auto-generated testing and red-teaming plans from each system's context, with results feeding back into risk treatment and compliance decisions - dedicated AI-evaluation tooling Acompli does not offer.
  • A curated third-party AI model and product catalogue (170+) with model cards, and a policy library aligned to the EU AI Act, ISO/IEC 42001 and NIST AI RMF, giving AI-sourcing and compliance teams a fast start on model governance.

04Sourced 2025-2026 signals

What's new at Saidot (2025-2026, sourced)

These sourced updates were researched on 2026-07-05 and are listed separately from the live comparison table so existing profile claims remain unchanged.

Additional capabilitySource: help.saidot.ai

Saidot's own release notes show an active 2025-2026 product cadence with specific features not named in the existing profile: "AI Act Classification Automation" (auto-classifies systems and assigns matching policy templates, released ~December 2024), "Evidence Store with AI Recommendations" for reusing evidence across systems (general availability, August 2025), a "Reviews" capability for scheduling internal/external review and assessment cycles (August 2025), and a Dataset Catalogue plus Model Catalogue APIs (October 2025). Through June 2026 (v8.12.0) Saidot continued adding risk/control assignment automation across entity types, a Transparency Report Data REST API, SSO enforcement and cursor-based pagination on its endpoints.

Market positioning nuanceSource: saidot.ai

In 2026 Saidot announced a go-to-market partnership with Vivicta, a Nordic digital-transformation/advisory firm, to deliver a three-phase (Design / Build / Run) managed AI-governance service for Nordic enterprises built on Saidot's platform plus Vivicta's advisory and operational support — a channel/services layer around Saidot not reflected in the existing profile, which describes Saidot only as a direct SaaS platform.

Market positioning nuanceSource: saidot.ai

Saidot is a small, early-stage vendor by funding: it raised a €1.75 million seed round in October 2023 led by Crowberry Capital and Ventic, with €250,000 from Finnish public agency Business Finland — no Series A or later round has been publicly announced as of mid-2026. This funding history is not mentioned in the existing profile and is useful buyer context (company scale/stability) alongside the existing customer names.

05Comparison context

Saidot alternatives

Saidot is publicly positioned in this market lane: Agent-first, graph-based AI-governance platform for the EU AI Act, ISO/IEC 42001 and NIST AI RMF era.

This page profiles Saidot's stated product and service coverage, best-fit buyer, rating and pricing signals, and published strengths before comparing where Acompli overlaps.

"Y" means publicly documented, while "N" means not publicly confirmed rather than proof that a supplier cannot provide it.

06At a glance

Saidot vs Acompli at a glance

This page profiles Saidot first, then compares public product and service coverage so buyers can decide what fits their own requirement.

Decision questionSaidotAcompli
Best fitAI, risk and compliance teams that want a dedicated AI-governance platform to inventory, classify and control AI systems and agents against the EU AI Act, ISO 42001 and NIST AI RMF.IE/UK/EU privacy teams that want first-class EU AI Act governance - AI Act risk classification, a governed AI-system register and a conformity/assessment workflow - connected to RoPA, DPIA, vendor and risk records, with human approval and per-entity DPC/ICO export.
Operating modelAn agent-first AI-governance platform built on an expert-curated knowledge graph that links AI systems, models, agents, datasets, risks, controls and policies.EU AI Act governance as a core pillar - AI Act risk classification, an AI-system register, conformity/assessment and human-approved AI-system records - connected to the GDPR programme (RoPA, DPIA, DSAR, risk, vendors, data mapping) and code-scan evidence, all human-approved and provenance-traceable.
When to choose itChoose Saidot when governing AI systems and agents at scale - inventory, risk inheritance, testing and EU AI Act conformity - is the primary discipline you need.Choose Acompli for EU AI Act governance built for IE/UK/EU privacy teams - risk classification, an AI-system register and conformity/assessment - connected to DPIAs and Article 30 records, human-approved, provenance-based, with a defensible per-entity export.

07Capability comparison

Saidot product and service coverage compared with Acompli

Y means a meaningful product, module, feature or service was publicly documented at the time of writing.

* "N" means this capability was not publicly confirmed at the time of writing - not proof the vendor lacks it. "Y" means it was publicly documented. Confirm current features directly with each vendor.
CapabilitySaidotAcompli
DPIA/PIA assessmentsNY
RoPA / Article 30NY
DSAR / privacy rightsNN
Data mappingNY
Vendor riskYY
Privacy riskNY
AI governanceYY
Consent managementNN
Cookie/tracker scanningNN
Breach/incident managementNN
Retention managementNY
Policy/notice managementYN
Training moduleNN
Approval workflowsYY
Audit trailYY
Role-based access controlNY
Multi-entity supportNY
Spreadsheet importNY
PDF/CSV/Excel exportNY
Public pricingNN

08Ireland & UK

Saidot vs Acompli for AI governance inside a GDPR programme in Ireland and the UK

Saidot governs AI systems as a specialist discipline against the EU AI Act, ISO/IEC 42001 and NIST AI RMF, while Acompli delivers EU AI Act governance built for Irish, UK and EU privacy teams and connected to a GDPR privacy programme around the Irish DPC and the UK ICO. Both classify AI Act risk and register AI systems; for an Irish or UK team the deciding question is where that AI-system record needs to live. Where an AI system processes personal data, that use also needs a DPIA under GDPR Article 35 and an entry in the Article 30 record - a controller record under Article 30(1) or a processor record under Article 30(2) - and the DPC and ICO each publish DPIA and Article 30 documentation guidance.

For both Saidot and Acompli, buyers should ask to see entity-scoped exports, reviewer history, source evidence and how EU GDPR and UK GDPR records are separated in practice.

  • EU GDPR Article 30(1) and Article 30(2) controller and processor records.
  • UK GDPR Article 30 documentation and ICO guidance fit.
  • Irish DPC accountability expectations and exportable evidence for each legal entity.

09Shortlisting notes

When Saidot belongs on the shortlist

Saidot should remain on the shortlist when its published market lane, product strengths and buyer fit match the requirement.

Acompli should be evaluated only where its own workflow coverage matches the requirement; this page is intended to show overlap and gaps, not to force a universal replacement narrative.

  • Shortlist Saidot when governing AI systems and agents at scale - inventory, risk inheritance, testing and EU AI Act conformity - is the primary discipline you need.
  • Shortlist Acompli when choose Acompli for EU AI Act governance built for IE/UK/EU privacy teams - risk classification, an AI-system register and conformity/assessment - connected to DPIAs and Article 30 records, human-approved, provenance-based, with a defensible per-entity export.
  • Ask each supplier to demonstrate the same workflow using current product screens, exports, review history and implementation assumptions.

Comparison FAQ

Saidot questions answered

What is Saidot?

Saidot is profiled here in this market lane: Agent-first, graph-based AI-governance platform for the EU AI Act, ISO/IEC 42001 and NIST AI RMF era. Saidot (Helsinki, Finland; founded 2018, CEO and founder Meeri Haataja) is a SaaS AI-governance platform for AI, risk, legal, compliance and sourcing teams. It is agent-first and graph-based: a centralised inventory registers every AI system, model, agent and dataset, and Saidot's knowledge graph links each to the risks, controls and policies that apply, so governance applied once flows to everything connected to it. The curated library spans 260+ risks, 620+ controls, 110+ policies (including ISO/IEC 42001 and NIST AI RMF) and 170+ third-party AI models and products, with native model imports from Azure OpenAI, Azure AI Services, Azure ML and Amazon Bedrock. Named users include the Scottish Government and Deloitte. It is an AI-governance specialist, not a GDPR privacy-operations suite - it does not perform RoPA, DPIA, DSAR, consent, cookie scanning, breach or retention.

What does Saidot provide?

Saidot provides the products, services or modules publicly evidenced in the capability table on this page. The table covers RoPA, DPIA/PIA assessments, DSAR/privacy rights, data mapping, vendor risk, privacy risk, AI governance, consent, cookie scanning, breach, retention, policy, training, workflow, audit and export signals.

Who is Saidot best suited for?

Saidot is best suited for enterprises and public-sector organisations - in the EU or with EU market exposure - that need a dedicated AI-governance platform to inventory, classify, control and test AI systems and agents, with legal, compliance, risk and sourcing teams working alongside AI teams. Buyers should still verify current product scope, service scope, contract terms and implementation requirements directly with Saidot.

What are Saidot's main product or service strengths?

Saidot's published strengths include Dedicated, agent-first AI governance built on an expert-curated knowledge graph - 260+ risks, 620+ controls and 110+ policies - where governance applied once inherits automatically to every linked system, agent and model. Acompli's AI register is one record type inside a privacy programme, not a standalone AI-risk graph of this depth; Native AI-stack integrations: automatic model imports from Azure OpenAI, Azure AI Services, Azure ML and Amazon Bedrock, a real agent catalogue (Microsoft Foundry Agent Service, Amazon Bedrock) with per-tool risk classification, and MCP servers that let your own AI agents draft risk assessments; Auto-generated testing and red-teaming plans from each system's context, with results feeding back into risk treatment and compliance decisions - dedicated AI-evaluation tooling Acompli does not offer.

What pricing or buyer-review signal is available for Saidot?

Saidot does not publish list prices. Its site describes a subscription model with plans you can change at any time (VAT added by location), and OECD.AI notes an inventory tool available "without seat-based pricing," while getting-started options range from a free trial or self-service onboarding to a facilitated pilot with Saidot's governance experts. Actual figures are demo-led through Get started, Book intro or sales@saidot.ai. Confirm current pricing, ratings, plan limits and service scope directly with Saidot before procurement.

Does Saidot support GDPR Article 30 RoPA?

Not publicly confirmed. Saidot is marked N for RoPA / Article 30 here, meaning public documentation does not clearly confirm it, not proof the supplier cannot provide it. Acompli is marked as publicly evidenced for the same row. Buyers should verify live module scope, service scope and export evidence directly with each supplier before procurement.

Does Saidot support DPIA or privacy assessments?

Not publicly confirmed. Saidot is marked N for DPIA/PIA assessments here, meaning public documentation does not clearly confirm it, not proof the supplier cannot provide it. Acompli is marked as publicly evidenced for the same row. Buyers should verify live module scope, service scope and export evidence directly with each supplier before procurement.

Does Saidot support DSAR or privacy rights workflows?

Not publicly confirmed. Saidot is marked N for DSAR / privacy rights here, meaning public documentation does not clearly confirm it, not proof the supplier cannot provide it. Acompli is marked as not publicly confirmed for the same row. Buyers should verify live module scope, service scope and export evidence directly with each supplier before procurement.

Does Saidot provide data mapping?

Not publicly confirmed. Saidot is marked N for Data mapping here, meaning public documentation does not clearly confirm it, not proof the supplier cannot provide it. Acompli is marked as publicly evidenced for the same row. Buyers should verify live module scope, service scope and export evidence directly with each supplier before procurement.

Does Saidot provide vendor risk or third-party privacy risk management?

Yes. Saidot publicly documents Vendor risk. Acompli is marked as publicly evidenced for the same row. Buyers should verify live module scope, service scope and export evidence directly with each supplier before procurement.

Does Saidot provide consent management or cookie scanning?

Not publicly confirmed. Saidot is marked N for Consent management here, meaning public documentation does not clearly confirm it, not proof the supplier cannot provide it. Not publicly confirmed. Saidot is marked N for Cookie/tracker scanning here, meaning public documentation does not clearly confirm it, not proof the supplier cannot provide it. Acompli is marked as not publicly confirmed for consent management and not publicly confirmed for cookie/tracker scanning, so buyers needing either capability should verify live vendor scope before procurement.

Does Saidot provide AI governance?

Yes. Saidot publicly documents AI governance. Acompli is marked as publicly evidenced for the same row. Buyers should verify live module scope, service scope and export evidence directly with each supplier before procurement.

How should buyers read the Saidot vs Acompli capability table?

The table records public-documentation signals for each supplier. "Y" means a meaningful product, module, feature or service was publicly documented; "N" means it was not publicly confirmed, not proof that the supplier cannot provide it.

What are Saidot alternatives?

Saidot alternatives depend on the buyer's exact requirement, because Saidot's strongest fit is: Choose Saidot when governing AI systems and agents at scale - inventory, risk inheritance, testing and EU AI Act conformity - is the primary discipline you need. The shortlist may include broad privacy platforms, GRC tools, specialist consent or DSAR tools, service providers, and Acompli where the buyer needs overlapping privacy-governance workflows shown in the table.

How does Saidot compare with Acompli?

Saidot should be assessed first on its own published fit: Choose Saidot when governing AI systems and agents at scale - inventory, risk inheritance, testing and EU AI Act conformity - is the primary discipline you need. Acompli is included as a factual overlap point where the requirement is: Choose Acompli for EU AI Act governance built for IE/UK/EU privacy teams - risk classification, an AI-system register and conformity/assessment - connected to DPIAs and Article 30 records, human-approved, provenance-based, with a defensible per-entity export. Buyers should ask both suppliers to demonstrate the same workflow with current product screens, exports and implementation assumptions.

When should buyers shortlist Saidot?

Buyers should shortlist Saidot when governing AI systems and agents at scale - inventory, risk inheritance, testing and EU AI Act conformity - is the primary discipline you need. They should only compare Acompli for the overlapping requirements shown on this page, and they should keep any specialist supplier that covers a requirement neither platform clearly evidences.

How current is this Saidot profile?

Ratings, pricing, product names, plan limits and service scope can change over time. Treat this as a comparison guide and verify current details with Saidot before procurement.

Acompli answers

Acompli as a Saidot alternative

Who are Saidot's competitors?

Saidot's main competitors are other AI-governance platforms such as Credo AI, Holistic AI, Modulos, FairNow and OneTrust's AI Governance module, along with ModelOp on the ML-operations side. Acompli is also an EU AI Act governance platform - with AI Act risk classification, an AI-system register and a conformity/assessment workflow - but it is built for privacy teams and connects AI governance to the GDPR programme (RoPA, DPIA), so it competes with Saidot on AI Act governance while taking a connected, provenance-based approach rather than a specialist standalone one.

Is Acompli a good Saidot alternative?

Acompli is a strong Saidot alternative for connected, provenance-based EU AI Act governance - AI Act risk classification, an AI-system register and a conformity/assessment workflow that feed DPIAs and Article 30 records, each entry human-approved, each legal entity getting a self-contained DPC or ICO export. It does not attempt Saidot's specialist AI work - an expert knowledge graph, an agent catalogue, model-level testing or shadow-AI discovery - which go deeper as a dedicated AI-governance discipline. Match the choice to whether you want AI Act governance owned by the privacy team and connected to GDPR, or a standalone specialist AI-governance function.

Does Acompli replace Saidot?

It depends on the kind of AI governance you need. Both are EU AI Act governance platforms, but Saidot adds specialist AI work Acompli does not attempt - an expert-curated knowledge graph, an agent inventory, native model imports, model-level testing and shadow-AI discovery. Acompli delivers the EU AI Act governance a privacy team owns - AI Act risk classification, an AI-system register and a conformity/assessment workflow, connected to DPIAs, Article 30 records and vendor evidence, all human-approved and provenance-based. Teams that need a standalone specialist AI-governance function would keep Saidot; teams that want AI Act compliance connected to their GDPR programme are well served by Acompli.

How do Saidot and Acompli differ?

Both are EU AI Act governance platforms; the difference is approach. Saidot is a specialist AI-governance pure-play: it inventories AI systems, models, agents and datasets and connects each to risks, controls and policies through an expert-curated knowledge graph, tilted toward the EU AI Act, ISO/IEC 42001 and NIST AI RMF. Acompli delivers first-class EU AI Act governance - AI Act risk classification, an AI-system register and a conformity/assessment workflow - built for privacy teams and connected to RoPA, DPIA, vendor and privacy-risk records, each traceable to its source evidence and human-approved, built around the Irish DPC and UK ICO. Saidot governs AI as a specialist standalone discipline; Acompli governs AI against the AI Act inside a connected GDPR programme.

Does Saidot do GDPR privacy tasks like RoPA, DPIA or DSAR?

No. Saidot is an AI-governance specialist and does not perform GDPR privacy-operations tasks such as Records of Processing Activities (Article 30), Data Protection Impact Assessments, consent management, cookie scanning, breach handling or retention. The Article 30, DPIA and risk record is core to Acompli. Where an AI system processes personal data, Acompli's AI register links that system to its DPIA and Article 30 record; Saidot governs the AI system itself but leaves the GDPR record to a privacy tool.

Does Saidot publish pricing, and does Acompli?

Neither publishes list pricing. Saidot uses a demo-led subscription model - plans you can change at any time, VAT added by location, an inventory tool described as available without seat-based pricing, and getting-started options from a free trial to a facilitated pilot - with figures provided via Get started, Book intro or sales@saidot.ai. Acompli prices on its compliance estate — data controllers, legal entities, jurisdictions and integrations — never per seat, and provides pricing on request, because the effort scales with the programme rather than the number of logins.

What is Saidot best at?

Saidot is best at dedicated AI governance. Its expert-curated knowledge graph - 260+ risks, 620+ controls, 110+ policies and 170+ third-party AI models - links AI systems, agents, models and datasets so governance inherits automatically across the portfolio. It offers native model imports from Azure OpenAI, Azure AI, Azure ML and Amazon Bedrock, an agent catalogue with per-tool risk classification, auto-generated testing and red-teaming plans, and MCP servers that let your own AI agents draft assessments. For governing AI systems and agents at scale, that depth is its strength.

Does Saidot cover the EU AI Act?

Yes. Saidot is built with EU AI Act requirements in mind and supports AI Act risk classification, alongside ISO/IEC 42001 and the NIST AI RMF, and it can send AI systems and classifications for internal review or external conformity assessment. Acompli is also a first-class EU AI Act governance platform: its AI-system register supports AI Act risk classification and a conformity/assessment workflow, and ties them to DPIAs and Article 30 records with human approval, provenance and per-entity DPC/ICO export. Both address the AI Act directly - Saidot as a specialist standalone discipline with an expert knowledge graph, Acompli as connected AI Act governance built for IE/UK/EU privacy teams inside the GDPR programme.

Does Saidot govern AI agents?

Yes. Saidot is explicitly agent-first: it offers a real agent catalogue that imports agents from Microsoft Foundry Agent Service and Amazon Bedrock, classifies the risk of each tool an agent can access, and exposes MCP servers so your own AI agents can participate in governance workflows. Acompli does not offer an agent catalogue or per-tool agent risk classification; its AI register captures AI systems as governed records tied to DPIAs and Article 30 entries rather than governing live agents at the tool level.

What is the best Saidot alternative for privacy teams that also govern AI?

For privacy teams that also govern AI, the best Saidot alternative is a first-class EU AI Act governance platform whose AI-system register lives inside the privacy programme. Acompli is built around exactly that - AI Act risk classification, an AI-system register and a conformity/assessment workflow, tied to DPIAs and Article 30 records, connected to RoPA, vendor and risk records, every value traceable to approved evidence, each record human-approved, and a per-entity export the DPC or ICO can read without a platform login. For specialist standalone AI work - an expert knowledge graph, an agent catalogue, model-level testing - Saidot goes deeper; for connected, provenance-based EU AI Act governance owned by IE/UK/EU privacy teams, Acompli is the closer fit.

Acompli overlap

Related Acompli workflows

Assessments

Run DPIAs, LIAs, TIAs, processor reviews and AI Act assessments with templates, AI support and human approval.

Open module

RoPA management

Maintain Article 30 records that stay linked to approved assessments, systems, suppliers and transfers.

Open module

Risk management

Extract candidate risks from approved evidence, assign treatment plans and report on current exposure.

Open module

Compare Saidot and Acompli against a real workflow.

Bring one RoPA, DPIA, vendor, risk or AI-governance requirement and map which parts are covered by Saidot, which parts Acompli covers, and where another specialist may still be needed.

Book a walkthroughSee a sample Evidence Pack

Acompli architecture

One governed foundation. Five connected modules.

Imported systems, suppliers, policies, DPIAs and RoPA spreadsheets become the shared evidence model for assessments, risk, records, third-party oversight and data mapping.

  1. 00FoundationOnboardingImport DPIAs, RoPA spreadsheets, suppliers, systems, policies and documents.
  2. 01AssessAssessmentsRun DPIAs, LIAs, TIAs, processor reviews and AI Act assessments with human approval.
  3. 02DetectRiskExtract candidate risks from approved evidence and assign treatment plans.
  4. 03RecordRoPAMaintain Article 30 records linked to assessments, systems, suppliers and transfers.
  5. 04VendorThird-PartyRecord suppliers once, then reference them across assessments, RoPA, risk and maps.
  6. 05MapData MappingBuild a living view of systems, suppliers, locations, categories and transfers.

Point tools create records. Acompli connects them.