Zero-Hallucination
EU
AI Act Compliance
Directly from Code.
ACE is a complete autonomous compliance compiler that automatically generates your entire Annex IV Technical Documentation directly from code, saving startups and SMEs tens of thousands in legal audit costs while providing active guidance to achieve conformity.
Autonomous Document Generation & Active Guidance
ACE is more than just a risk scanner. It is a complete autonomous package that generates the full, structured Annex IV compliance pack.
Existing checkers perform risk classification but stop there, leaving engineering teams with empty checklists and blank files. Compliance officers are forced to hire legal consultancies at €200–€500 per hour, racking up thousands of euros in auditing debt trying to manually draft technical documentation.
ACE automates this entire cycle. It statically parses your codebase, builds a dual-index RAG system over your code and the EU AI Act corpus, and compiles a ready-to-submit compliance pack. More than that, ACE acts as a compliance co-pilot: when it detects missing structures or telemetry, it provides the developer with active IDE linting advice, showing exactly what code constructs to implement to become compliant.
How the Engine Compiles Compliance
Core slides and architecture mapping from the ACE AI Compliance Compiler deck.
The Commercial Window Closes
Binding timelines enforce compliance: Dec 2, 2027 for Annex III High-Risk systems and Aug 2, 2028 for embedded AI products. Startups must act early to avoid the bottleneck of manually drafting technical documentation, saving thousands in lawyer fees.
The Market Gap
Existing checkers (ark-forge, Systima, EuConform) only do basic scanning, risk metrics, and risk classification. ACE is the first engine to perform deep structural repo-awareness to automatically compile and generate the complete 9-section Annex IV pack.
Developer-Native Compliance
Replaces the Old Way (expensive manual audits, external counsel, and generic templates) with the ACE Way: automated extraction of technical facts directly from code. No boilerplate templates—only system-specific, verifiable codebase evidence.
Engine Architecture
Sleek, modular structure: /api (routing and generate), /scanner
(Tree-sitter AST parsing), /rag (dual legal and repo indexes),
/generator (trace verification & manifest output), and /mcp_server
(IDE integrations). Built locally on LlamaIndex + ChromaDB.
End-to-End Workflow Pipeline
A seamless four-step flow: Scan (framework detection) → Extract (Tree-sitter parses function structures and dependencies) → Clarify (adaptive Web UI fills gaps) → Generate (RAG pipeline writes files to target compliance pack `.zip`).
Dual-Index RAG Orchestration
Our proprietary moat: simultaneously queries the Legal Corpus (EU AI Act Articles 9-15 & Annex IV schema) and the Repository Corpus (AST chunks, import graphs, configurations) to contextualize and ground all compliance generations.
Bridging the Code-Process Gap
If the static scanner detects a codebase gap (e.g. no human oversight hook in AST), it maps it directly into an adaptive 15-question Web UI. This prevents developer fatigue by only asking questions about elements that cannot be automatically found in the code.
The Trace-or-Flag Verifier
Every generated compliance claim is audited. If the verifier finds a matching construct in
the AST, it logs the code line reference. If it cannot ground the claim, it scrubs the text
and flags the claim with [EVIDENCE REQUIRED] to avoid hallucinations.
Anatomy of the Compliance Pack
ACE outputs a complete compliance-pack.zip: annex-iv/ (9
structured markdown files), manifest.json (machine-readable audit ledger),
VERIFICATION.md (human summary report), and
ai-bom.cyclonedx.json (ML SBOM).
Simulate the Compliance Scanner
Experience how ACE parses a repository, executes RAG mappings, and catches ungrounded inferences.
Click below to scan the sample DeepFace codebase.
C:\dev\ACE-EU-AI
Compliance Verification Record
Target scanned: serengil/deepface
Real-Time IDE Compliance Sync
ACE detected that you claim log logging triggers are in place, but no logging AST node exists. Clicking the button below simulates adding the missing hook directly into Cursor IDE and triggers an instant incremental check.
Full Annex IV Technical Coverage
ACE maps your software automatically across all nine segments required for placement on the European Single Market.
General Description
Defines system identity, deployment configuration roles (Provider/Deployer), hardware schemas, and automatically infers regulatory scope.
Development Process
Constructs structural AI-BOMs capturing ML libraries, dataset dependencies, weights verification, and design flow choices from AST code paths.
Monitoring & Control
Tracks and maps logging decorators, human-in-the-loop oversight hooks, fail-safe gates, and model output controls.
Performance Metrics
Extracts evaluation scripts, validation benchmarks, and accuracy tolerances. Maps them to the expected high-risk thresholds.
Risk Management
Grounds continuous risk reviews, bias test evaluations, and automated software validation logic in verifiable commits.
Lifecycle Changes
Verifies code refactoring impact and triggers automated documentation updates upon integration changes inside the VCS loop.
Harmonised Standards
Validates applying standard frameworks (ISO 42001, IEC 62304) and automatically correlates compliance claims with harmonised requirements.
Declaration of Conformity
Compiles draft templates indicating certification tracks, CE marking readiness, and legal representative declarations.
Post-Market Monitoring
Organizes telemetry hooks, error logging loops, feedback channels, and incident dispatch configurations.
Eliminate €15,000+ in Legal Fees
Rather than performing a simple scan and leaving you with empty forms, ACE is an autonomous package that compiles your complete compliance record. By automatically extracting code structures, mapping evidence, and writing the 9-section documentation draft, ACE eliminates weeks of manual consultant audits at €200–500/hr, putting audit-ready files directly into your repository.
Active Compliance Guidance
ACE doesn't just list what's wrong. Through our FastMCP server interface, ACE acts as a real-time compliance co-pilot inside your IDE. When the scanner identifies a regulatory gap—like a missing human oversight hook or audit log—it provides inline developer linting warnings and specific, actionable code suggestions to resolve the issue directly.
The EU AI Act compliance countdown is active.
Startups placing AI products on the European market face strict, binding deadlines. Failing to comply can result in severe financial penalties up to €35 million or 7% of global turnover, alongside complete product withdrawal.
Retrospective auditing at the deadline leads to system halts. The solution is adopting continuous, automated evidence mapping during the engineering cycles today.
General AI High-Risk Systems Deadline
December 2, 2027
Providers of general-purpose and standalone high-risk AI software (Annex III categories, biometric screening, recruitment, etc.) must deploy fully compliant Annex IV files.
Embedded AI Regulated Product Deadline
August 2, 2028
Enforcement targets AI systems embedded inside safety components of machinery, medical devices, civil aviation, and regulated infrastructure components.
Guaranteed Compliance. Direct from Code.
Interested in adopting ACE for your engineering workspace? Submit your information to receive project telemetry reports, beta invite codes, and development updates as we prepare for launch.