EU AI Act compliance, without the guesswork.
The world’s first comprehensive AI law applies to almost any business that builds, deploys, or uses AI affecting people in the EU — most companies using tools like ChatGPT or AI-based HR software, not just AI builders. We tell you exactly where you stand.
2 Dec 2026
Next deadline: new prohibitions on non-consensual sexual deepfakes and CSAM apply, plus the Article 50(2) transparency duty for existing synthetic-content systems. High-risk Annex III obligations follow on 2 Dec 2027 (Digital Omnibus, Reg (EU) 2026/1744).
Up to €35M / 7%
Maximum penalty for prohibited-practice violations, on global turnover.
No SMB exemption
The Act applies at every size. Using third-party AI tools like ChatGPT can trigger deployer obligations regardless of headcount.
How it works
One rule-based questionnaire. A deterministic result. Audit-ready output.
Every question maps to a specific article of the Act, and every result traces back to a rule and a citation — never an AI guess. Each step below is one package; move to the next only when you need it.
Answer & get classified
- Adaptive questionnaire, skips what doesn't apply
- Applicability + your role(s) identified
- Deterministic risk tier under Annex III
Understand your gaps
- Compliance readiness + coverage scores
- Full obligation gap analysis by category
- Prioritised action plan + audit-ready report
Become compliant
- AI system inventory + risk register
- Every policy & record your role requires
- Built from your answers · PDF + DOCX
The four risk tiers
Unacceptable
Prohibited outright, social scoring, manipulative AI, certain biometric surveillance.
High-risk
CV screening, credit scoring, medical devices, strict obligations apply.
Limited risk
Chatbots, deepfakes, transparency obligations apply.
Minimal risk
Most internal tools, no specific obligations.
Pricing
Transparent, fixed-scope pricing for the EU AI Act module. No retainers, no hourly billing, no account — request a quotation and we invoice you directly.
Free AI Act Check
€0
A quick, anonymous readiness snapshot, no account needed. See whether the EU AI Act applies to you, your likely role, how your AI system classifies, and where to focus next.
- A short, adaptive questionnaire, it skips sections that don't apply to you
- Applicability determination and role(s) identified (provider, deployer, etc.)
- Estimated risk level (risk tier) for your AI system
- Key observations and high-level focus areas
- Recommended next steps
- Free and anonymous, no account, no card, nothing stored
AI Act Assessment
€299
A complete one-time diagnostic of your EU AI Act position, applicable obligations, gaps, risks, and a prioritised action plan, delivered as a management report. No account needed: request a quotation and we take it from there.
- A comprehensive, adaptive questionnaire, the depth depends on your role and how you use AI
- Detailed applicability assessment and compliance readiness score
- A compliance readiness score, a coverage score, and per-system risk scoring
- Full obligation gap analysis, organised by regulatory category
- Comprehensive mapping of applicable EU AI Act obligations
- Prioritised, risk-ranked action plan and implementation roadmap
- Executive summary for leadership
- Audit-ready report, rule-traced to regulation articles
Need the policy and governance documents too? The AI Act Compliance Package builds them from this assessment.
AI Act Compliance Package
From €999
Everything in the Assessment, plus the compliance documents your obligations require (policies, procedures, records, and an audit pack) built from your actual answers. Priced by scope, typically €999–€2,499+.
- Everything in the AI Act Assessment
- AI system inventory / register
- Risk register covering every identified gap
- Risk Classification Dossier: a defensible record of why each system is, or isn't, high-risk, cited to the exact Article
- Diligence Response Pack: a shareable summary of your compliance position for buyers, investors and procurement
- Annex IV technical-documentation dossier: an index and readiness map for your Article 11 file (high-risk systems)
- A full set of policy, procedure, and governance documents, selected by your actual obligations, not a fixed bundle
- Governance & risk management, data governance, technical documentation, logging, transparency & human oversight, accuracy, robustness & cybersecurity, post-market & conformity, and operational duties records
- Built from your answers, then tailored with your organisation's own details
- Only the documents your role (provider, deployer, importer, distributor) needs
- PDF and DOCX formats
Complex or multi-system estate? We scope a custom engagement, just say so in your request.
The Assessment is a fixed price; the Compliance Package is scoped to your estate (typically €999–€2,499+). Prices exclude VAT where applicable and apply only to the EU AI Act module. No account and no payment on the site — you receive a quotation and we invoice you directly.
What you receive
Every deliverable is generated from one set of answers, so your report, dossiers and documents never contradict each other. Each is traced to a specific article of the Act. All of it is compliance support, not legal advice.
Assessmentincluded from the €299 AssessmentCompliance Packageadded in the Compliance Package
EU AI Act Assessment Report
Your full diagnostic: every applicable obligation, your gaps, a readiness score and a prioritised roadmap. One audit-ready report, every line traced to an article.
Risk Classification Dossier
A defensible, standalone record of why each system is, or isn't, high-risk, with the exact legal basis (the Annex III area, the Article 6(3) analysis) behind each determination.
Diligence Response Pack
A concise, shareable statement of your compliance position, the document you hand to a buyer, investor or procurement team when they ask whether you're compliant.
Annex IV Technical Documentation Dossier
The index and readiness map for your Article 11 technical file: what each of the nine Annex IV points requires, which of your documents supplies it, and what is still outstanding. For high-risk systems.
Your compliance documents
The policies, procedures and records your role actually requires (risk management, data governance, human oversight, logging, post-market monitoring and more), selected by your obligations and filled with your own details.
Audit pack
Everything above bundled and indexed, ready for an auditor or authority to review in one place, in PDF and DOCX.
Built for companies without a compliance department
If any of these sound like you, the question isn’t whether the Act could apply — it’s which role and risk tier you fall into.
SaaS & software teams
Shipping AI features and unsure whether that makes you a provider under the Act.
Businesses using AI tools
Deploying third-party AI in HR, marketing, or operations, even ChatGPT-based workflows.
Agencies & consultants
Need a fast, defensible baseline for a client before deeper advisory work.
EU AI Act FAQ
Does the EU AI Act apply to my company if I only use tools like ChatGPT?
Very likely yes, in a deployer capacity, Article 3(4) defines a deployer as anyone using an AI system under its own authority in a professional context. Our assessment distinguishes general-purpose tool use from operating a specific AI system, so you won't be over-classified.
What's the difference between a provider and a deployer?
A provider (Art. 3(3)) develops an AI system and places it on the market under its own name. A deployer (Art. 3(4)) uses one in its operations. Providers carry the heaviest obligations; deployers carry lighter but still substantive ones.
What's the difference between the AI Act Assessment and the AI Act Compliance Package?
The AI Act Assessment is a complete one-time evaluation of where you stand, your compliance readiness score, risk and gap analysis, mapped obligations, and a prioritised action plan. It tells you exactly what's missing. The AI Act Compliance Package goes further: it builds the actual compliance framework (your AI system inventory, risk register, and the policies, procedures, and governance documents your obligations require) so you become compliance-ready, not just informed.
When do the EU AI Act's main obligations take effect?
Prohibited practices applied from 2 February 2025. General-purpose AI model obligations applied from 2 August 2025. Most of the Act became applicable on 2 August 2026. The Digital Omnibus on AI (Regulation (EU) 2026/1744) then deferred the high-risk obligations: Annex III now applies from 2 December 2027, and Annex I safety-component systems from 2 August 2028.
Start with the free check.
See whether the Act applies, your role, and your risk tier — on screen, no account, in minutes.