Evidence packs for your auditor

Regula is free. The CLI stays free forever. Evidence packs are signed, timestamped compliance reports you can hand to an auditor, a customer, or a regulator.

Free

EUR 0
Free forever
  • Risk classification across 419 patterns
  • Gap analysis against EU AI Act articles
  • Remediation plan with effort estimates
  • JSON and text output
  • Annex IV documentation scaffold
regula check . && regula gap . Current behaviour

Starter

EUR 49
One-time per evidence pack
  • Everything in Free
  • Ed25519-signed evidence pack
  • SHA-256 integrity manifest
  • Annex IV documentation scaffold
  • Compliance score with per-article breakdown
  • Auditor-ready PDF-printable format
regula conform --sign . Coming soon

Professional

EUR 149
One-time per evidence pack
  • Everything in Starter
  • Conformity assessment pack
  • Declaration of Conformity template
  • Prioritised remediation plan
  • CycloneDX AI SBOM
  • RFC 3161 timestamp
regula conform --sign --timestamp . Coming soon

Paid tiers are not yet available. No payment is currently processed and no purchase is possible. The pricing shown is indicative of the planned model. The free CLI and all its commands remain fully available.

Your code never leaves your machine. Evidence packs are generated locally. We never see your code or your scan results.

Questions

Will the free tier ever become paid?

No. The CLI is the distribution channel. Every command that exists today stays free forever. Evidence packs are a paid deliverable on top of the free tool.

What do I actually get?

A ZIP bundle containing JSON scan results, gap analysis, Annex IV documentation, remediation plan, and a SHA-256 integrity manifest. Starter packs are Ed25519-signed. Professional packs add a conformity assessment pack, Declaration of Conformity template, and a CycloneDX SBOM.

Is this a subscription?

No. Each payment generates one evidence pack for one project at a point in time. Run it again next quarter if your codebase has changed.

Can my auditor verify the pack?

Yes. Each bundle includes a standalone verify.py script that checks SHA-256 hashes of every file against the manifest. Signed packs also include an Ed25519 signature your auditor can verify independently.