What is Maditon?

Maditon does the compliance work a small company actually gets asked to do, and leaves the judgement to a named person.

Every account starts with the register: the suppliers you depend on and the systems that depend on them. Register a supplier and Maditon finds its published legal documents — privacy policy, terms, data processing agreement, security page, sub-processor list, AI policy, service level agreement — fetches copies, reads them and returns findings that each quote the passage they came from. The documents are re-read on schedule and a daily e-mail says what changed. Upload a customer’s security questionnaire and Maditon drafts the answers from your own record for you to approve. SLA levels and support contacts sit in one view, private documents are encrypted per organisation, and a system or the whole register exports as a PDF package.

The EU AI Act module turns the regulation into a worked case for one specific company.

You register the AI systems you build or use. For each one, an AI-led interview asks plain-language questions — what the system does, who it affects, which sector it operates in — and produces a draft risk classification under the EU AI Act, with the articles and the quoted regulation text behind it. That classification generates the obligation checklist that actually applies to your tier, and each obligation can carry evidence files. When you need to show your work, the whole thing exports as a PDF/A-1b dossier.

The part that distinguishes it from a chatbot is what happens to the AI’s output: nothing is a determination until a named person on your team accepts it, with their name and a timestamp on the record. The software does the labour; accountability stays where the regulation puts it.

Maditon is built and hosted entirely in the EU by Abiton Ventures AB, a Swedish company. It is B2B only.