EU AI Act Readiness

Produce operational triage, not a legal opinion. The AI Act changes through amendments, delegated/implementing acts, guidance, standards, and national enforcement practice; verify the law and dates at the start of every assessment.

Inputs

Collect or state:

• Assessment date, target EU/EEA countries, organization locations, customer/user locations, and where system outputs are used.
• Each AI system/model's purpose, intended use, use-case screen, reasonably foreseeable misuse, lifecycle status, exact system/model versions, launch/change dates, material modifications, and affected people.
• Organization role(s) for each system: provider, deployer, importer, distributor, product manufacturer, authorised representative, or GPAI model provider.
• Model/vendor chain, branding, fine-tuning or substantial modifications, integrations, data sources, and contract allocation.
• Jurisdictions, decision domain, degree of automation, human-oversight design/authority, outputs, transparency interface, monitoring, incidents, complaint/appeal paths, and explicit reassessment triggers.
• Existing risk, quality, privacy, security, accessibility, procurement, recordkeeping, and AI-literacy evidence.

Use the blank AI system inventory template when no reliable inventory exists.

Output contract