Progress 0 / 22 questions answered

EU AI Act Compliance Checklist

Assess your AI system's compliance with the EU AI Act.

Risk Classification & Assessment

Is your AI system classified according to the EU AI Act risk categories (Unacceptable, High, Limited, Minimal)?

Yes, it has been formally classified Classification is in progress Not yet classified

Do you have an established risk management system for your AI systems?

Yes, a comprehensive system is in place A basic risk management process exists No dedicated system exists

Do you perform continuous risk assessments throughout the AI system's lifecycle?

Yes, through continuous monitoring and assessment Only periodic assessments are performed Only a one-time assessment was conducted

Are risk assessment results documented and made accessible to relevant stakeholders?

Yes, fully documented and accessible Partially documented or accessible Not documented or not accessible

Data Governance & Quality

Do you have established data quality processes for your training datasets (e.g., relevance, representativeness, error checking)?

Yes, we have a comprehensive data quality system Only basic checks are in place No formal process is in place

Do you have a dedicated data governance framework for AI data (e.g., data sources, permissions, lifecycle management)?

Yes, a complete data governance system is established It is currently under development No dedicated framework exists

Do you regularly perform bias detection and mitigation on your training data and model?

Yes, we perform systematic bias monitoring We only perform occasional checks No bias monitoring is in place

Is the origin and processing history of all training and input data traceable?

Yes, full traceability is in place Partial traceability exists No traceability is in place

Does your AI system comply with GDPR-specific requirements (e.g., automated decision-making, profiling)?

Yes, it is fully GDPR compliant It is partially compliant Compliance has not yet been assessed

Transparency & Documentation

Have you prepared the technical documentation in accordance with Article 11 of the EU AI Act?

Yes, the complete documentation is ready Documentation is in progress Not yet started

Do users receive clear and adequate information about the AI system's operation, capabilities, and limitations?

Yes, comprehensive user documentation and information is provided Only basic information is provided No user documentation or information is provided

For a high-risk AI system, have you registered it in the mandatory EU database?

Yes, it is registered Not a high-risk system Registration is pending Not registered (but required)

Has a conformity assessment been conducted for your high-risk AI system?

Yes, a successful assessment was completed Not applicable (not a high-risk system) Assessment is in progress Not done (but required)

Do you clearly indicate to end-users that they are interacting with an AI system?

Yes, it is always clearly indicated It is only partially or not always indicated It is not indicated

Human Oversight & Control

Is there a human-in-the-loop mechanism for critical decisions?

Yes, mandatory human oversight is required Optional human intervention is possible No human oversight is in place

Can automated AI decisions be overridden by a human decision?

Yes, all decisions can be overridden Only critical decisions can be overridden There is a limited override capability No override capability exists

Are users explicitly informed that they are interacting with an AI-based system?

Yes, they are clearly and proactively informed They are partially or unclearly informed They are not informed

Have the personnel responsible for human oversight received adequate training and do they possess the necessary competence?

Yes, they receive comprehensive and regular training They have received only basic training No specific training has been provided

Robustness, Security & Accuracy

What level of cybersecurity measures are in place to protect your AI system?

Encryption (for data and models) Strict access control Intrusion detection systems Regular vulnerability scanning Regular security audits None of the above

Do you conduct regular accuracy and performance testing on the AI model?

Yes, through continuous monitoring and testing Only periodic testing is conducted Only one-time testing was performed at launch

Are the operations of the AI system logged and auditable?

Input data logging Output and decision logging Model version tracking User interaction logging A complete and verifiable audit trail No logging

Is there an AI-specific incident response plan in place (e.g., for model drift, increased bias, or a security breach)?

Yes, a comprehensive incident response plan exists Only a basic incident response plan exists No AI-specific incident response plan exists

Your AI Security Assessment

/100

📧 Get your results via email

We will send you the complete report with all answers and recommendations

I accept the Terms of Use.

Want a deeper analysis?

Our experts can help with a detailed AI Red Team audit

Schedule Free Consultation →

Is your company ready for the EU AI Act?

Take our 3-Minute EU AI Act Checklist! The EU’s strict new AI regulation is mandatory. This quick audit helps you assess your readiness, from risk classification (high-risk AI) and transparency to documentation requirements.

Complete it in just 3 minutes to receive an instant score on your compliance gaps! We’ll email you the detailed evaluation and actionable steps.