ComplyLayer
complylayer.com
What it is
ComplyLayer helps companies catalogue AI tools and use cases, assess risk, prepare compliance documents, collect policy acknowledgements, and demonstrate governance. Its inventory supports owners, departments, and risk levels, and includes more than 50 popular AI tools out of the box. It can generate AI Usage Policies, Technical Documentation, Conformity Declarations, Transparency Notices, Data Privacy Notices, and Bias Assessment Reports. ComplyLayer connects with Claude, Claude Code, and Cursor, which can search connected services such as Slack, Notion, Drive, Jira, and GitHub. Discovered tools and use cases wait in a review queue until a person accepts them. The Trust Portal provides auditors, regulators, legal teams, or boards a secure read-only link without an account. The optional browser extension records at most a 240-character prompt preview and file names, not full prompts or file contents. Customer data is hosted on AWS in Frankfurt and encrypted at rest with AES-256 and in transit with TLS 1.2 or higher. The free plan has no time limit or credit card requirement. Pro costs $125 a year; Enterprise pricing is custom and not listed.
Spec sheet
- What it does
- ComplyLayer is a SaaS platform for inventorying AI systems, classifying their regulatory risk, generating compliance documents, collecting policy acknowledgements and producing audit evidence.Read 15 Oct 2026 · complylayer.com
- Intended users
- The site presents ComplyLayer for companies and describes compliance officers, consultants, auditors, regulators, and boards among its users or stakeholders.Read 8 Oct 2026 · complylayer.com
- Integrations
- Read-only connections are listed for OpenAI and Anthropic admin keys, Google Workspace, Microsoft 365, GitHub, Slack, Notion, Basecamp and HR systems including Personio, BambooHR and Workable.Read 15 Oct 2026 · complylayer.com
- Support
- The Pro plan includes priority support.Read 8 Oct 2026 · complylayer.com
- AI inventory
- The inventory records AI owners, departments and risk levels and includes more than 50 popular AI tools as starting entries.Read 15 Oct 2026 · complylayer.com
- AI monitoring
- The optional browser extension detects AI-tool use and keeps at most a 240-character prompt preview rather than full conversations.Read 15 Oct 2026 · complylayer.com
- Audit reports
- Users can download PDF reports showing AI systems, risk levels, document status and the compliance score.Read 15 Oct 2026 · complylayer.com
- Availability limitation
- The terms say the service is provided as available and does not guarantee uninterrupted, error-free or completely secure operation.Read 15 Oct 2026 · complylayer.com
- AWS delivery model
- AWS Marketplace lists ComplyLayer as internet-delivered SaaS rather than software deployed on AWS customer infrastructure.Read 15 Oct 2026 · aws.amazon.com
- AWS pricing unit
- AWS states that Starter and Pro are priced per organisational workspace, not per seat, with unlimited AI systems.Read 15 Oct 2026 · aws.amazon.com
- AWS refund limitation
- AWS Marketplace subscriptions are billed in advance and normally non-refundable for partial or unused periods, subject to limited exception review.Read 15 Oct 2026 · aws.amazon.com
- AWS support
- AWS Marketplace says Starter and Pro include email support with replies within one business day, while Pro adds priority support and Enterprise adds a dedicated contact.Read 15 Oct 2026 · aws.amazon.com
- Certifications
- SOC 2 Type II and ISO/IEC 27001 are listed as roadmap items, and the site says it will publish reports once completed.Read 8 Oct 2026 · complylayer.com
- Chrome extension details
- The Chrome listing shows version 1.0.6, updated June 22, 2026, with a 15.24 KiB package and disclosed access to web history, user activity and website content.Read 15 Oct 2026 · chromewebstore.google.com
- Company headquarters
- The legal contact address is 131 Continental Dr, Suite 305, Newark, Delaware 19713, United States.Read 15 Oct 2026 · complylayer.com
- Company legal name
- The terms identify the provider as Comply Layer, Inc.Read 15 Oct 2026 · complylayer.com
- Compliance documents
- The platform generates usage policies, technical documentation, transparency notices and other framework documents, with editing, approval and version control.Read 15 Oct 2026 · complylayer.com
- Data hosting and encryption
- Customer data is hosted on AWS in Frankfurt, Germany, and encrypted at rest with AES-256 and in transit with TLS 1.2 or higher.Read 8 Oct 2026 · complylayer.com
- Data processing
- The company says customer data is not used to train AI models and lists AWS, Stripe, Resend, and OpenAI as processors.Read 8 Oct 2026 · complylayer.com
- Data use
- The company says customer data is not used to train AI models and can be deleted by the organisation from account settings.Read 15 Oct 2026 · complylayer.com
- Document languages
- Documents, audit reports and the Trust Portal can be produced in English, French, German, Spanish, Portuguese, Dutch and Italian.Read 15 Oct 2026 · complylayer.com
- Framework coverage
- The product covers the EU AI Act, GDPR, and US AI and privacy frameworks; Enterprise offers bespoke mapping for ISO 42001, NIST AI RMF, and DORA.Read 8 Oct 2026 · complylayer.com
- Human review
- Assistant-discovered tools and use cases enter a review queue and are not added to the inventory until someone accepts them.Read 8 Oct 2026 · complylayer.com
- Independent marketplace description
- AWS describes ComplyLayer as covering EU AI Act, GDPR and US AI/privacy frameworks, with ISO 42001 and DORA available for enterprise mapping.Read 15 Oct 2026 · aws.amazon.com
- Inventory and risk
- The inventory supports owners, departments, and risk levels, and the site says it covers 50+ popular AI tools out of the box.Read 8 Oct 2026 · complylayer.com
- Legal disclaimer
- The service and generated suggestions are expressly described as organisational software and not legal advice.Read 15 Oct 2026 · complylayer.com
- Licence and ownership
- ComplyLayer retains intellectual-property ownership of its platform, documentation, frameworks and templates; the terms do not grant an open-source licence.Read 15 Oct 2026 · complylayer.com
- MCP endpoint
- Cursor configuration uses https://app.complylayer.com/api/mcp/ with a bearer personal token.Read 15 Oct 2026 · complylayer.com
- MCP permissions
- The assistant is read-only for inventory and compliance data; proposals require a human accept or dismiss action and cannot approve documents or classifications.Read 15 Oct 2026 · complylayer.com
- MCP server
- ComplyLayer exposes an MCP server that works with Claude, Claude Code, Cursor and other Streamable HTTP MCP clients.Read 15 Oct 2026 · complylayer.com
- Monitoring limit
- The optional browser extension captures at most a 240-character prompt preview and file names, and does not capture full prompts, AI responses, file contents, passwords, or form inputs.Read 8 Oct 2026 · complylayer.com
- Product purpose
- ComplyLayer helps companies inventory AI tools and use cases, classify risk, generate compliance documents, collect policy acknowledgements, and demonstrate governance.Read 8 Oct 2026 · complylayer.com
- Rating on AWS Marketplace
- 0 ratings out of 5 from 0 reviewsRead 15 Oct 2026 · aws.amazon.com
- Rating on Chrome Web Store
- 0 out of 5 from 0 ratingsRead 15 Oct 2026 · chromewebstore.google.com
- Risk alerts
- Alerts can be triggered by sensitive data in prompts, unapproved AI tools, missing documentation or overdue reviews, with severity levels and resolution history.Read 15 Oct 2026 · complylayer.com
- Risk classification
- A guided workflow classifies each AI system from minimal through unacceptable risk and records whether the customer is provider or deployer.Read 15 Oct 2026 · complylayer.com
- Security hosting
- Customer data is hosted on AWS in Frankfurt, Germany, with AES-256 encryption at rest and TLS 1.2 or higher in transit.Read 15 Oct 2026 · complylayer.com
- Security limitation
- SOC 2 Type II and ISO/IEC 27001 are described as roadmap items rather than current certifications.Read 15 Oct 2026 · complylayer.com
- Subprocessors
- Named subprocessors are AWS, Stripe, Resend and OpenAI, with a data-processing agreement available on request.Read 15 Oct 2026 · complylayer.com
- Team governance
- Policies can be emailed for one-click acknowledgement, with signed versions and timestamps retained as an audit trail.Read 15 Oct 2026 · complylayer.com
- Trust Portal
- The Trust Portal provides a read-only, time-limited evidence link with configurable 7-, 14-, 30- or 90-day expiry and revocation.Read 15 Oct 2026 · complylayer.com
- Workforce monitoring responsibility
- Customers deploying the monitoring extension remain responsible for employee notice, lawful basis and compliant use of monitoring data.Read 15 Oct 2026 · complylayer.com
Plans and prices
Free Free No credit card, no time limit Unlimited AI systems and use cases · Inventory, risk classification, documents, acknowledgements, audit reports, Trust Portal, Claude/Claude Code/Cursor connector Read 8 Oct 2026 · complylayer.com
Free Free No time limit; no credit card Unlimited AI systems and use cases · inventory · risk classification · compliance documents · policy acknowledgements · audit reports · Trust Portal · Claude/Claude Code/Cursor connector Read 15 Oct 2026 · complylayer.com
Starter (AWS Marketplace) $99 a month 1-month contract Unlimited AI systems · inventory · EU AI Act risk classification · document generation · policy acknowledgements · audit reports · auditor portal Read 15 Oct 2026 · aws.amazon.com
Pro $149 a month Billed monthly Everything in Free · browser monitoring · risk alerts · data leak detection · Controls Read 15 Oct 2026 · complylayer.com
Pro $149 a month Billed monthly Everything in Free · Browser extension monitoring · Real-time alerts · Data leak detection · Weekly digest reports · Priority support Read 8 Oct 2026 · complylayer.com
Pro (AWS Marketplace) $149 a month 1-month contract Starter features · browser monitoring · GitHub code scanning · risk alerts · data leak detection · weekly digests · priority support Read 15 Oct 2026 · aws.amazon.com
Pro $1,499 a year Billed as $1,499/year. Save $289 Everything in Free · Browser extension monitoring · Real-time alerts · Data leak detection · Weekly digest reports · Priority support Read 8 Oct 2026 · complylayer.com
Enterprise Priced on request Custom pricing Everything in Pro · controls for AI use cases · API access · bespoke framework mapping Read 15 Oct 2026 · complylayer.com
Strong points and limits
Strong points
- Free plan has no time limit.
- Inventory supports owners, departments, and risk levels.
- Findings require human acceptance before inventory entry.
- Trust Portal access does not require an account.
Limits
- Pro costs $125 a year.
- Enterprise pricing is custom and unlisted.
- SOC 2 Type II and ISO/IEC 27001 remain roadmap items.
Who it suits
ComplyLayer suits companies managing AI governance, including compliance officers and consultants. Its Trust Portal also serves auditors, regulators, legal teams, and boards who need read-only access.
Verdict
ComplyLayer combines inventory, risk classification, document generation, and review workflows for AI governance. Its free tier includes substantial core functions; Enterprise is the stated route for custom controls and framework mapping.
Where Specifiction places it
- AI governance tools#2 of 569.3
- AI Governance Software#2 of 569.1