5 ms·
Show HN: EuConform – Offline-first EU AI Act compliance tool (open source)
I built this as a personal open-source project to explore how EU AI Act
requirements can be translated into concrete, inspectable technical checks.
The core idea is local-first compliance:
– risk classification (Articles 5–15, incl. prohibited use cases)
– bias evaluation using CrowS-Pairs
– automatic Annex IV–oriented PDF reports
– no cloud services or external APIs (browser-based + Ollama)
I’m especially interested in feedback on whether this kind of
technical framing of AI regulation makes sense in real-world projects.
- dmitrygr 9mo ago"EuConform" <- I love the name. Not sure if you meant it as it reads, but I love it.
- petcat 9mo ago"you conform" is how it reads to me. which leaves a bad taste given the nature of it.
- hiepler 9mo agoFair point The name is meant literally as “EU conformity” (EU + conform), not “you conform”. I was aiming for something that signals regulatory alignment without sounding legal-heavy, but I get how it can read differently.
- dabedee 9mo agoHey there! I find the idea super relevant and I think compliance tools that can be used like this are the way forward. Given the timeline of the commits and some other tells (e.g. using forwardRef despite using React 19 which deprecates it), it seems like you used coding assistants extensively. That's a personal preference, but I would mention that explicitly (if that's the case), if only for intellectual honesty.
- hiepler 9mo agoThanks, appreciate the thoughtful feedback. You’re right that the commit history doesn’t fully reflect the raw development process. I did some cleanup and squashing before publishing, since this is an open-source project and I wanted the history to be readable and reviewable. I do use coding assistants as part of my workflow, mostly for iteration speed and boilerplate, but the architectural decisions, evaluation logic, and compliance mapping are intentional and manually reasoned through. Happy to clarify any part of the implementation or assumptions if something looks odd.
- Tiberium 9mo agoIs there a reason why you're using LLMs for comments as well?
- 9dev 9mo agoHard disagree from me there. I don’t care what language a tool is built with, I’m neither interested in their choice of code editor, nor whether they use AI in the process or not. It’s a means to an end, not some flaw to be ashamed of and forced to disclose. If something gets built with AI or not at all, that’s a net positive as far as I’m concerned.
- ushakov 9mo ago[flagged]
- imiric 9mo agoAh, yes. You mean technology like "AI" that creates a positive impact on people?
- scoresmoke 9mo agoYes.
- input_sh 9mo agoHello, my name is George C. Parker and I have a bridge to sell you.
- scoresmoke 9mo agoBefore I buy, can you confirm the bridge is GDPR-compliant, AI-Act-ready, has a digital product passport, and passed its environmental impact assessment? Otherwise the local compliance officer will fine us before it even collapses.
- lawlessone 9mo ago>Before I buy, can you confirm the bridge is GDPR-compliant, AI-Act-ready, has a digital product passport, and passed its environmental impact assessment? Great comment! We've added double-plus-good to your Palantir-Trumport account and 2% off your next Amazon purchase!
- InsideOutSanta 9mo agoYou could have written a comment that would have created a positive impact on people, but you chose to aggressively attack somebody who created a helpful open-source tool.
- 9mo ago
- hash872 9mo agoGlad to see future builders focusing on bureaucratic compliance first & foremost. It's a stirring vision. This is a great European VC on Twitter you may want to tag about your project, he invests solely in GDPR-compliant European tech https://x.com/compliantvc https://x.com/compliantvc
- agentifysh 9mo agoIf you are not European, it doesn't seem very attractive for non-Europeans to deal with all the anti-business regulations. Also just from the data that has been shared with me chargebacks/complaints/nitpicking/stinginess alone from this region seems to demoralizing compared to Americans/East Asia We have this idealized view of a rich affluent "Europe" born from Marshall Plan but that certainly is not the actual reality today.
- troupo 9mo ago> non-Europeans to deal with all the anti-business regulations. These are not "anti-business regulations".
- pyrale 9mo ago> all the anti-business regulations. Regulation is made to protect customers. Consumer trust is favorable to business in the long run. It's really sad that US technologists confuse business and grift these days. Maybe it's related to their main customers being VCs, and the people using service just being props needed to have the line go up.
- Kim_Bruning 9mo agoThe EU started out as an economic union. They are still very capitalist. Which means they protect consumers, promote fair competition, and encourage trade between member states. They're neither mercantilist nor plutocratic.
- ankit219 9mo agoCalling it "Conform" is very 1984esque. There is also a 2025 book (a dystopian romance) called the same: https://www.goodreads.com/book/show/223239535-conform https://www.goodreads.com/book/show/223239535-conform
- lawlessone 9mo agoTIL 1984-esque is when i can't use my customers data to train bots.
- ankit219 9mo agoTIL you cant take a joke on the name, and you have to invoke a stated premise to feel better. If you really thing that is the only thing the act is doing (without realizing the carve outs it has for facial recognition etc.) then i have a tower bridge to sell to you. Rules and regulations always assume it would be used by a rational actor, but should be written such that someone irrational would not be able to misuse it. That is teh premise of 1984. But you do you .
- mort96 9mo agoNeeding to conform to various rules and regulations isn't exactly a new thing
- rvz 9mo agoWhat innovation do we have here from the EU? Its official name should be: The Official EU AI Act Compliance Regulation Conformance Tool MMXXVI v1.0 If you are one patch version behind, you are "non-complaint" and you will get fined immediately. We <3 EU!
- bigyabai 9mo agoThis but unironically. Snuff Google, Microsoft and Apple with the passion of a thousand suns and never let their ashes rise again to threaten fair people. Signed, an American who is fed up with adslop and saasslop propaganda. Do not reward immoral megacorps.
- troad 9mo agoAs a person who's lived in Europe, I encourage you to try it. You'll find that there are some upsides to all the regulation, but also many downsides. More than you'd expect if you've never lived and worked in Europe before. Many things you take for granted - don't even think about - either don't work at all, or don't work well. Not knocking Europe, but there's too much of a tendency online to picture Europe as some kind of Disneyland. Some of this is down to Americans who only know Europe from two-week holidays and picture it as a holiday utopia, some of it is Europeans who only know America from reality television and picture it as a hellscape. Pop discourse != reality.
- troupo 9mo ago> You'll find that there are some upsides to all the regulation, but also many downsides. And those are? > Many things you take for granted - don't even think about - either don't work at all, or don't work well. And those are?
- deleted 9mo ago[deleted]
- pennaMan 9mo agoin this case the best compliance is non compliance degrowth decels are a scourge
- troyvit 9mo agoA scourge to what, exactly?
- sothatsit 9mo agoHuman flourishing
- pennaMan 9mo agoTo the human race. The only reason we're not living miserable animal lives is because of technological progress. Wanting to slow that down means you are anti human.
- wizzwizz4 9mo agoThe industrial revolution created slums. Social progress made those go away – and I'm sure the factory owners decried it just as vehemently.
- pennaMan 9mo agoThe industrial revolution also created clean drinking-water systems, sewerage and wastewater treatment, basic sanitation and hygiene infrastructure, mass-produced vaccination, antibiotics, antisepsis and sterilization, anesthesia, obstetric and neonatal care technology, refrigeration and cold-chain logistics, food safety and industrial food processing, pasteurization, canning, mechanized agriculture, synthetic fertilizers, modern crop breeding and seed systems, electrification and power grids, hospital infrastructure engineering and medical imaging. To name a few.
- wizzwizz4 9mo agoThe industrial revolution created a few of those things, but the term refers to a specific period of economic development between (quoth Wikipedia) "c. 1760 . c. 1840", where the production of several classes of goods was mechanised. Not all technological development since the 18th century is the industrial revolution. To pick one example from your list: synthetic fertilisers are largely due to the Haber process iirc, which was a 20th-century invention.
- PeterStuer 9mo agoThe problem is that the interpretation of what the defacto requirements for what compliance with the ai act entails still is in high flux and changing on a weekly basis.
- hiepler 9mo ago[dead]