EU Artificial Intelligence Act (AI Act) compliance checker

Operator role

Which type of operator is your organisation in relation to this AI system?

You can be several types of operator at the same time (see recital 83). If you meet the definition of more than one type, complete the questionnaire separately for each role.

Deployer status

Product manufacturer

Does your product integrate an AI system and meet any of the following criteria?

Note: this applies only if your product is placed on the market / put into service in the EU, regardless of whether you are established in the EU.

Source: Article 25(3), Annex I

Scope

Do you meet any of the following criteria?

A list of EU Member States is available on the European Union website.

Source: Article 2

Exceptions

Does your system or use case fall into any of the following categories?

Source: Article 2

High risk — Annex I

Does your AI system fall into any of these high-risk categories? (Annex I, Section B)

Source: Article 6(1)

Does your AI system fall into any of these high-risk categories? (Annex I, Section A)

Source: Article 6(1)

Must your product (or the product for which the AI system is a "safety component") undergo a third-party conformity assessment under the applicable EU legislation?

Check the legislation applicable to your product category in Annex I, Section A. If your product must undergo a third-party conformity assessment under any of that legislation, select "Yes". Some legal acts allow the third-party assessment to be avoided if you meet the conditions of Article 43(3) — in that case select "No". If in doubt, we recommend consulting a lawyer.

Source: Article 6(1)

Does your AI system fall into any of these high-risk categories? (Annex III)

Not sure? Definitions of the individual categories can be found in Annex III to the Regulation.

Source: Article 6(2)

Is the system used to evaluate creditworthiness (credit scoring) or for risk assessment and pricing in life and health insurance? (This does not cover systems used solely to detect financial fraud.)

Annex III, point 5(b) and (c). If yes, a fundamental rights impact assessment (FRIA) is mandatory even for private entities that do not provide public services. If the sole purpose of the system is fraud detection, this category does not apply to it even though it processes data similar to scoring — Annex III, point 5(b).

Source: Annex III, point 5(b) and (c), Article 27(1)(b) and (c)

Does your AI system pose a significant risk of harm to the health, safety or fundamental rights of persons?

The system does not pose a significant risk if at least one of the following conditions is met:

• the system is intended to perform a narrow procedural task;
• the system is intended to improve the result of a previously completed human activity;
• the system is intended to detect decision-making patterns or deviations from them and is not meant to replace or influence a previously completed human assessment without proper human review;
• the system is intended to perform a preparatory task for an assessment relevant to the use cases listed in Annex III.

If the system meets at least one of these conditions, select "No". If it meets none of them, select "Yes".
Important: a system is always considered high-risk if it performs profiling of natural persons — in that case select "Yes".

Source: Article 6(3)

Does your product contain an AI system as a "safety component" and at the same time fall into any of these categories?

Safety component: a component of a product or system which fulfils a safety function for that product or system, or the failure or malfunctioning of which endangers the health and safety of persons or property (Article 3(14)).

Source: Article 25(3), Annex I

General-purpose AI model (GPAI) — systemic risk

Does your AI model meet any of the following criteria?

High-impact capabilities: an AI model has "high-impact capabilities" if the cumulative amount of computation used for its training, measured in floating point operations, exceeds 10²⁵.

Source: Article 51

Prohibited practices

Does your system perform any of the following functions?

Not sure? Definitions of the individual terms can be found in Article 5 of the Regulation.

Source: Article 5

Transparency

Does your system perform any of the following functions?

Source: Article 50

Fundamental rights impact assessment

Are you a body governed by public law, or a private entity providing public services?

Source: recital 96, Article 27