Choose the fastest path
Start with the tool that matches your situation. Each path links to a practical next step instead of making you read every guide first.
Not sure where your AI use stands?
Run the free AI compliance checkup to get a practical readiness score, likely risk bucket, missing controls and next actions.
AI Compliance Checkup
Answer a few questions to get a practical readiness snapshot. The result is a starting point, not legal advice.
What this site helps you do
AIComplianceCheckup.com is a practical tool-site for businesses that need to understand AI compliance without starting with a 200-page legal memo. It helps teams map AI use cases, spot likely EU AI Act risk categories, prepare governance basics, create first-draft AI policy language, and build a repeatable AI risk assessment workflow.
- Run a fast AI Act and AI governance readiness check.
- Understand whether your use case may be prohibited, high-risk, transparency-risk, GPAI-related, or lower risk.
- Create a simple AI policy outline for employees and teams.
- Build an AI inventory, risk assessment, and monthly update routine.
The smart position: not legal advice, but operational readiness
The goal is not to replace legal counsel. The goal is to help founders, compliance managers, product teams, HR teams, and security leaders prepare the facts that legal counsel will ask for anyway: who owns each AI system, what it does, which data it uses, who is affected, what controls exist, and how issues are monitored after launch.
What to prioritise first
- Inventory: list every AI tool, model, vendor, and internal use case with an accountable owner.
- Classification: identify possible prohibited, high-risk, transparency-risk, GPAI, and minimal-risk use cases.
- Policy: define what employees may and may not do with AI tools, especially when sensitive data is involved.
- Risk assessment: document data quality, bias, privacy, cybersecurity, explainability, human oversight, and incident handling.
- Evidence: keep records, training logs, vendor documentation, notices, tests, and review dates.
Why AI governance matters even for small teams
Many companies think AI compliance is only for model developers. In practice, deployers and ordinary businesses can still face transparency, employee training, procurement, vendor management, privacy, security, and operational risk questions. A small company using AI in customer support, recruiting, credit screening, employee monitoring, marketing, or document processing should still know where AI is used and which controls are in place.
Monthly maintenance plan
This site is designed around a low-maintenance workflow. Review official EU AI Act updates, AI Office guidance, NIST AI RMF changes, and major regulatory developments once a month. Update pages only when guidance, deadlines, support tools, or risk interpretations materially change.
Turn AI compliance research into a guided workflow
Use the new decision tools to move from generic AI Act research to a practical next step: classify a use case, map impact and urgency, then open the most relevant guide.
Explore AI compliance by business use case
Industry-specific pages help teams find examples closer to their situation and create stronger internal links across the site.
FAQ
Is this legal advice?
No. The site provides general information, practical checklists, and self-assessment tools. It does not provide legal advice.
Who is this site for?
It is for startups, SaaS companies, ecommerce teams, HR teams, product teams, agencies, and businesses using or providing AI systems.
What should I do first?
Start with an AI inventory, then classify use cases, define an AI policy, and document risk controls.
Does the EU AI Act apply outside the EU?
It can be relevant to non-EU organisations when AI systems are placed on the EU market, used in the EU, or produce outputs used in the EU. Check the official text and seek legal advice for your facts.
How often should I update my AI compliance plan?
For most small teams, a monthly review plus a check before launching new AI use cases is a sensible starting point.
Sources and review method
This page is written as general business guidance, not legal advice. It is maintained from official AI Act materials, European Commission / AI Office updates, the NIST AI Risk Management Framework and practical AI governance controls.