Turn the result into a written AI action plan
Use the policy generator, risk assessment template and AI inventory checklist to document the controls your team needs next.
AI Compliance Checkup
Answer a few questions to get a practical readiness snapshot. The result is a starting point, not legal advice.
How the checker works
The checker asks about your market, role, use case, GPAI exposure, and existing controls. It then produces a practical readiness profile. It does not decide legal classification, but it helps you find the questions that matter before you speak with counsel or implement controls.
What your result means
- Potentially prohibited: stop and get specialist review before continuing.
- High-risk candidate: prepare a formal assessment, documentation, human oversight, monitoring, and governance evidence.
- Transparency-risk: plan user notices, chatbot labels, AI-generated content labels, and human escalation.
- GPAI exposure: confirm whether you provide a GPAI model or rely on a third-party model and collect vendor documentation.
- Lower-risk/internal use: still maintain policy, training, security, privacy, and monitoring basics.
What to do after the checkup
Export or copy the result, assign an owner, attach supporting documents, and schedule a review. The most common mistake is treating AI compliance as a one-off questionnaire. A better approach is a living register: each AI system has an owner, purpose, data description, risk classification, controls, vendor documents, and a next-review date.
FAQ
Can the checker tell me whether I am compliant?
No. It gives a readiness snapshot and highlights issues to investigate. Compliance depends on your exact facts, legal role, market, sector, and system design.
Can a deployer have obligations?
Yes. Deployers should consider transparency, human oversight, monitoring, training, documentation, vendor management, and sector-specific duties.
What if I only use ChatGPT or other third-party tools?
You should still define acceptable use, data restrictions, review sensitive outputs, and keep records of approved tools and use cases.
Sources and review method
This page is written as general business guidance, not legal advice. It is maintained from official AI Act materials, European Commission / AI Office updates, the NIST AI Risk Management Framework and practical AI governance controls.