EU AI ACT — DEADLINE IN FLUX

Your code deploys AI.
Do your logs comply?

Open-source CLI that audits AI codebases and traces against EU AI Act requirements. One command. Articles 11, 12, 13, 50 + GDPR Article 30.

The current legal deadline is August 2, 2026. The European Parliament voted 569-45 on March 18, 2026 to extend it to December 2, 2027; trilogue negotiations target agreement by April 28. Compliance infrastructure takes 12-18 months to build regardless of when the deadline lands. Teams evaluating AI frameworks are already asking: which one makes compliance easier?

$ pip install ai-trace-auditor && aitrace comply ./

Scans your codebase. Generates Annex IV documentation, data flow diagrams, and GDPR RoPA. 60 seconds. No API keys. Everything stays local.

What it generates

Annex IV Documentation

Technical documentation skeleton with auto-populated sections: providers detected, models in use, deployment configs, evaluation scripts. Fill the gaps, not the boilerplate.

Record-Keeping Audit

Feed your OTel, Langfuse, or raw traces. Get a gap report: which fields are logged, which are missing, and exactly what to add to satisfy Article 12.

Data Flow Map + RoPA

Auto-detects AI providers, vector DBs, cloud services. Generates Mermaid diagrams and GDPR Article 30 Records of Processing Activities with transfer safeguard warnings.

Transparency Check

Detects user-facing AI endpoints. Flags Article 50 disclosure obligations: users must know they're talking to AI. A UI obligation the tool reminds you about.

Run it in CI

Add one step. Every PR gets a compliance check. Fail the build if gaps appear.

# .github/workflows/compliance.yml name: EU AI Act Compliance on: [push, pull_request] jobs: comply: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - uses: BipinRimal314/ai-trace-auditor@v0.14.0 with: command: comply path: .

What exists vs. what this does

Capability Langfuse / Arize Credo AI OneTrust / Vanta aitrace
Collect LLM traces Yes - - Ingests theirs
Map traces to regulations - - - Yes
Generate Annex IV docs - - - Yes
GDPR data flow mapping - - Manual Auto
CI/CD integration - - - GitHub Action
Open source Partial No No Apache 2.0
Runs locally Cloud Cloud Cloud 100% local
Price $$$ $$$$ $$$$ Free

Pricing

Open Source
Free
CLI + GitHub Action. Apache 2.0. Forever.
  • Full CLI: audit, comply, docs, flow
  • EU AI Act + NIST AI RMF requirements
  • GitHub Action for CI/CD
  • Evidence pack export (PDF, diagrams, checklists)
  • Multi-agent DAG auditing
  • 100% local, no API keys
  • Community support (GitHub Issues)
pip install ai-trace-auditor
Compliance Audit
$2,500 one-time
Evidence pack your compliance officer can hand to an auditor.
  • Full compliance evidence pack
  • EU AI Act Articles 11, 12, 13, 50 + GDPR 30
  • PDF report, data flow diagrams, checklists
  • Expert review and gap remediation guidance
  • Delivered within 2 weeks
Book a call

Validated on real projects

Compliance guides generated by this tool have been submitted and reviewed on:

LiteLLM (30K+ stars) n8n (56K+ stars) Dify (90K+ stars) Haystack (20K+ stars) CrewAI (27K+ stars)

Reviewed by Greptile, cubic-dev, and Gemini Code Assist. All flagged issues fixed and fed back into the product.