AI Act Risk Finder

Assess your AI system in line with the EU AI Act risk-based approach.

1AI ReadinessIs this in scope?
2AssessmentAnswer key questions
3Risk ClassificationEU AI Act level
4Next StepsActions & compliance
EU AI Act aligned terminology

Start with AI readiness, then classify the AI system.

This tool follows the EU AI Act risk-based logic: first check whether the use case appears to be an AI system and identify your role, then assess prohibited practices, high-risk classification, limited-risk transparency obligations, GPAI indicators and next steps.

EU AI Act categories used in this tool

Unacceptable Risk / Prohibited AI Practices

Potential Article 5 prohibited practices. The use case should stop and be escalated.

High-Risk AI System

Article 6 and Annex III / Annex I logic. Strong AI Act obligations may apply.

Limited Risk / Transparency Obligations

Article 50-style notices, disclosures, or labelling for certain AI systems and outputs.

General-Purpose AI (GPAI) Obligations

Additional obligations or checks where general-purpose AI models or GenAI are used.

Minimal / No Risk

No major EU AI Act trigger found. Basic governance and re-assessment are still recommended.

AI Development Care Points

Guidance for teams building a new AI tool: purpose, data, model, safety, transparency, testing, monitoring and approval.

Sample use cases

Load a sample assessment

Use these examples to see how answers affect classification and next steps.

New assessment

Assess the AI system

Answer the guided questions. The result follows the EU AI Act process and terminology.

Choose assessment mode

Use Quick Mode for fast screening. Use Detailed Mode for full EU AI Act readiness and go-live review.

Detailed Mode shows the full EU AI Act screening and readiness questions.

AI Readiness — scope and role

Check whether this appears to be an AI system and identify your organisation’s role.

AI development readiness — what to take care before building

Use this when you want to develop a new AI tool. These questions help identify design, data, model, testing, transparency and governance care points early.

Assessment — prohibited AI practices

Article 5-style prohibited practice screening. Select what applies.

Assessment — high-risk AI system indicators

Article 6 / Annex III style screening for high-risk AI systems.

Assessment — limited-risk transparency obligations

Article 50-style transparency check.

Assessment — General-Purpose AI (GPAI) obligations

General-purpose AI and generative AI indicators.

Assessment — Annex I product safety check

Article 6 can also classify AI as high-risk when it is used as a safety component of regulated products listed in Annex I.

Assessment — Article 6 significant-risk exception check

Some Annex III use cases may be argued as not high-risk only when they do not pose significant risk to health, safety or fundamental rights. Profiling natural persons normally keeps the concern high.

AI readiness — high-risk obligations readiness

If the system is high-risk, these are the readiness checks users should complete before go-live.

Assessment — General-Purpose AI (GPAI) provider/model check

The EU AI Act uses the term General-Purpose AI (GPAI). These questions distinguish use of GPAI from providing or substantially modifying a GPAI model.

No assessment result yet

Start a new assessment or load a sample use case.

About the EU AI Act

How this tool follows the EU AI Act process

1. Scope & Role Readiness

Check EU scope, AI system scope, impacted persons, and whether your organisation is provider, deployer, product manufacturer, importer or distributor.

2. Assessment

Answer questions on prohibited practices, high-risk areas, limited-risk transparency obligations and GPAI/GenAI indicators.

3. Risk Classification

Classify into unacceptable/prohibited risk, high-risk AI system, limited-risk transparency obligations, General-Purpose AI (GPAI) obligations, minimal/no risk, or needs review.

4. Next Steps

Generate go-live status, required actions, proof to keep, high-risk readiness gaps, GPAI obligations, and monitoring actions.