What does this EU AI Act checker tell me?

It places your AI system or general-purpose AI model into one of the AI Act's risk tiers — prohibited, high-risk, limited (transparency), or minimal — or, for GPAI models, whether systemic-risk obligations apply. It walks the Article 2, 5, 6, 50 and 51 logic to give a structured starting point.

Is the EU AI Act a directive my country still has to transpose?

No. The AI Act is a Regulation, directly applicable across the EU without national transposition. It applies in phases — prohibited practices from 2 February 2025, GPAI obligations from 2 August 2025, Annex III high-risk obligations from 2 August 2026, and the Annex I product-route high-risk obligations from 2 August 2027.

We use open-source AI — are we exempt?

Only partly. Free and open-source AI is relieved of some obligations, but never from the Article 5 prohibitions, and not where the system is high-risk or falls under Article 50. Open-source GPAI without systemic risk gets a lighter transparency regime, not a full exemption.

My Annex III system feels low-risk — is it still high-risk?

Possibly not. Article 6(3) lets an Annex III system out of the high-risk tier if it only performs a narrow procedural task, improves a prior human activity, detects deviations without replacing human review, or is preparatory — but never if it profiles natural persons. This is a documented, fact-specific assessment.

Is this legal advice?

No. It is a free, structured starting point based on the Regulation's text and your inputs. Classification turns on the system's intended purpose and your operator role, and several boundaries are fact-specific or decided by the authorities. Confirm with your competent authority or counsel.

Do you store my answers?

No. The classification runs entirely in your browser. There is no form gate and we do not capture or store your inputs.

Free tool

EU AI Act risk-tier checker

Find out which EU AI Act risk tier your AI system or general-purpose AI model falls into — prohibited, high-risk, transparency, minimal, or GPAI — in about two minutes.

Classification follows Regulation (EU) 2024/1689 (AI Act): Art. 2, 5, 6 + Annexes I & III, 50 and 51. It is a Regulation (no national transposition) and applies in phases: prohibited practices from 2 Feb 2025, GPAI from 2 Aug 2025, Annex III high-risk from 2 Aug 2026, and Annex I product-route high-risk from 2 Aug 2027. A free, open-source licence does not exempt prohibited, high-risk or Art. 50 systems. This is a structured starting point, not legal advice.

FAQ

What does this EU AI Act checker tell me?: It places your AI system or general-purpose AI model into one of the AI Act's risk tiers — prohibited, high-risk, limited (transparency), or minimal — or, for GPAI models, whether systemic-risk obligations apply. It walks the Article 2, 5, 6, 50 and 51 logic to give a structured starting point.
Is the EU AI Act a directive my country still has to transpose?: No. The AI Act is a Regulation, directly applicable across the EU without national transposition. It applies in phases — prohibited practices from 2 February 2025, GPAI obligations from 2 August 2025, Annex III high-risk obligations from 2 August 2026, and the Annex I product-route high-risk obligations from 2 August 2027.
We use open-source AI — are we exempt?: Only partly. Free and open-source AI is relieved of some obligations, but never from the Article 5 prohibitions, and not where the system is high-risk or falls under Article 50. Open-source GPAI without systemic risk gets a lighter transparency regime, not a full exemption.
My Annex III system feels low-risk — is it still high-risk?: Possibly not. Article 6(3) lets an Annex III system out of the high-risk tier if it only performs a narrow procedural task, improves a prior human activity, detects deviations without replacing human review, or is preparatory — but never if it profiles natural persons. This is a documented, fact-specific assessment.
Is this legal advice?: No. It is a free, structured starting point based on the Regulation's text and your inputs. Classification turns on the system's intended purpose and your operator role, and several boundaries are fact-specific or decided by the authorities. Confirm with your competent authority or counsel.
Do you store my answers?: No. The classification runs entirely in your browser. There is no form gate and we do not capture or store your inputs.

By ISMS Copilot. Classification follows Regulation (EU) 2024/1689 (AI Act): Art. 2, 5, 6 + Annexes I & III, 50 and 51. It is a Regulation (no national transposition) and applies in phases: prohibited practices from 2 Feb 2025, GPAI from 2 Aug 2025, Annex III high-risk from 2 Aug 2026, and Annex I product-route high-risk from 2 Aug 2027. A free, open-source licence does not exempt prohibited, high-risk or Art. 50 systems. This is a structured starting point, not legal advice.

Ready to streamline your compliance work?

Built for speed, accuracy, and audit-ready output.

Try ISMS Copilot 2.0