SimpleAct
German EU AI Act and GDPR workspace with AI inventory, risk classification and audit history, hosted in Germany, from €199 per month
Quick Overview
| Company | SimpleAct UG (haftungsbeschränkt) |
|---|---|
| Category | AI Governance and EU AI Act Compliance Software |
| Headquarters | Recklinghausen, Germany |
| Founded | Not stated |
| EU Presence | Yes - Germany (EU) |
| Data Location | Germany (Hetzner) |
| Open Source | No |
| GDPR Compliant | Yes |
| Self-Hosting | No |
| Main Features | AI inventory, AI discovery, guided risk classification (Art. 5 to 7, Annex III), model registry, compliance checklists, Annex IV documentation, GDPR module (RoPA, DPIA, TOMs), audit log, SSO |
| Pricing | Starter €199 per month (€159 billed yearly), Professional €349 (€279 yearly), Enterprise on request; net of VAT |
| Best For | Small and mid-size companies that need to start EU AI Act compliance and GDPR records together |
| Replaces | Credo AI, spreadsheets for the EU AI Act |
Detailed Review
SimpleAct keeps AI inventory, risk assessment and evidence in one data record, and every change lands in an audit history. A guided questionnaire checks prohibited practices, Annex III high-risk triggers and transparency duties, and the classification follows from the answers by rule.
The imprint names SimpleAct UG (haftungsbeschränkt), Tannenstrasse 2a, 45661 Recklinghausen, entered at Amtsgericht Recklinghausen as HRB 10368. The site is hosted with Hetzner Online GmbH in Germany.
Plans in the Open
Starter is €199 per month for up to five AI systems and three users, or €159 billed yearly. Professional is €349 (€279 yearly) with unlimited systems and users, a GDPR module, AI discovery and single sign-on through OIDC, SAML and LDAP. Enterprise adds SCIM, a REST API and custom SLAs. Prices are net of VAT and a 7-day trial needs a credit card.
AI Act and GDPR Together
The GDPR module includes the record of processing activities, data protection impact assessments, technical and organisational measures, processor agreements, data subject requests and breach handling. For companies that need both sets of records, that avoids a second tool.
Free Quick Check
A free two-minute quick check of six questions on scope, role and use case returns a probable risk class with duties and deadlines, without sign-up.
Limitations to Consider
SimpleAct is a young company in the legal form of a UG, which is a small-company vehicle, so due diligence on continuity is sensible. Technical testing of models is not part of it, so pair it with Giskard or Validaitor if you need that. The Starter plan stops at five AI systems and three users. Certifications were not stated on the pages checked.
Who Should Use SimpleAct
German-speaking and European SMEs that want a low-cost, German-hosted start for EU AI Act inventory and GDPR records.
Pros and Cons
Pros
- Published monthly prices
- Hosted in Germany
- GDPR module in the same workspace
- Rule-based risk classification with article references
- Free quick check without sign-up
Cons
- Starter limited to five systems and three users
- No model testing
- Credit card needed for trial
- Young company, no certifications stated
Alternatives to SimpleAct
Other European ai governance and eu ai act compliance software worth comparing before you decide:
Saidot
Finland · Governance platform on a knowledge graph of AI risks and controls
Modulos
Switzerland · Zurich platform that prices AI risk in euros and tracks controls
Validaitor
Germany · Karlsruhe platform joining AI inventory, red-teaming and compliance
Deeploy
Netherlands · Runtime AI governance on top of existing MLOps and GenAI stacks
See all European ai governance and eu ai act compliance software or compare them directly against Credo AI on our alternatives page.
Frequently Asked Questions
Starter is €199 per month (€159 billed yearly) and Professional €349 per month (€279 yearly), net of VAT. Enterprise is on request.
The site states hosting in Germany, and the imprint names Hetzner Online GmbH as hosting provider.
Yes, from the Professional plan: the GDPR module includes records of processing, DPIAs, TOMs and data subject requests.