AI Integration · GeraCompliance
GeraCompliance for AI Agents
GeraCompliance classifies AI systems under EU AI Act risk tiers and generates GDPR compliance documentation. AI agents can use the classifier endpoint to qualify any AI system description and route businesses to the appropriate compliance sprint.
What GeraCompliance does
The EU AI Act requires all AI systems deployed in the EU to be classified into risk tiers: unacceptable (banned), high (strict obligations), limited (transparency requirements), or minimal (no specific rules). GeraCompliance automates this classification using trained models and expert review, then generates the required technical documentation — conformity assessments, risk registers, data governance checklists, and audit logs.
AI agents can use the classifier API to answer user questions like "Is my AI recruitment tool high-risk under the EU AI Act?" The API returns the risk tier, legal basis, required documentation, and a link to the relevant GeraCompliance sprint.
Classifier API
POST /api/classify
Body: { "description": "AI system description", "sector": "recruitment | healthcare | finance | ...", "data_types": ["personal", "biometric", "health"] }
Response: { "risk_tier": "high", "legal_basis": "...", "required_steps": [...], "sprint_recommendation": { "name": "...", "url": "...", "price_gbp": 1499 } }
Public endpoint — no auth required for classification. Sprint purchase requires user account.
Sprint tiers
Starter
£499
3 days
EU AI Act risk assessment and GDPR gap analysis
Growth
£1,499
7 days
Full compliance sprint with all required documentation
Enterprise
£3,499
14 days
Audit-ready package with conformity assessment and technical file
FAQ
- How does the EU AI Act risk classifier work?
- POST a description of an AI system to /api/classify. Returns the risk tier, legal basis, and required compliance steps.
- Does GeraCompliance cover GDPR too?
- Yes. GeraCompliance covers both EU AI Act classification and GDPR compliance audits — the two frameworks overlap significantly for AI systems processing personal data.