Free tool · EU compliance

Is your business ready for the EU AI Act?

If your team uses ChatGPT, a website chatbot or an HR tool with screening, the AI Act already applies to you. Answer a few questions to see your risk level, what you have to do and by when.

How you use AI

Answer for the whole organisation, not just yourself.

The AI Act applies when an AI system, or its output, is used in the EU.
What do you use AI for? Tick all that apply.
EU AI Act
–

your highest risk level

Basics in place
–
Gaps to close
–
Your role
–

Not legal advice. Dates as of October 2026, after the Digital Omnibus.

Free, no obligation

Want a second opinion on these numbers?

Send us your results. We’ll reply with what we’d do first, and whether the kit is enough for you.

Your results are attached automatically. Fields marked * are required.

A person replies within one business day.

How the numbers are worked out

Your answers place each AI use in the AI Act’s risk tiers: prohibited practices (Article 5), high-risk uses (Annex III), transparency duties (Article 50) and minimal risk. The basics score counts the documents a deployer should be able to show: a list of AI tools, a written policy, staff training records and, where needed, customer notices.

Sources: Regulation (EU) 2024/1689 (EUR-Lex); Digital Omnibus on AI, in force 27 July 2026 (summary, Gibson Dunn). Checked October 2026.

Questions

Does the EU AI Act apply to small businesses?

Yes. Any organisation that uses AI tools in a professional context is a “deployer”. Small businesses get lower fines, not an exemption.

What applies right now?

AI literacy for staff who use AI and the ban on prohibited practices (since 2 February 2025), and transparency since 2 August 2026: chatbots must disclose they are AI (a duty on the provider, which you check as the user) and AI-generated media that looks real must be labelled by the deployer.

When do the high-risk rules apply?

For stand-alone high-risk uses such as CV screening, credit scoring or biometrics, deployer duties apply from 2 December 2027. The Digital Omnibus, in force since 27 July 2026, moved this from August 2026.

Does it apply to companies outside the EU?

It can, if the AI system is used in the EU or its output is used there, for example a chatbot answering EU customers.

Is this legal advice?

No. It is a quick self-check. Have your policy reviewed by counsel.

Close the gaps in two hours

The EU AI Act Deployer Kit: AI-use policy, literacy programme with quiz and log, AI system register, transparency notices and risk log, with free updates when dates change.

See the kit · $159