ghostcorpnet

Home · Free tools

Free tool · 3 minutes

EU AI Act Readiness Checker

By · Free self-assessment

Answer 10 questions about how your team deploys AI. You'll get a readiness score out of 100, your risk tier, and a prioritized fix list for the gaps that matter most.

Do you deploy AI systems or AI agents in production?

The Act applies to providers and deployers who put AI on the market or into service — including API-powered agents.

Do any of your AI use cases fall in EU high-risk categories?

Recruiting or worker management, credit or insurance pricing, education, law enforcement, biometrics, migration, or safety components of regulated products (Annex III).

Do you build on general-purpose AI models (foundation models)?

GPAI obligations (technical documentation, training-data summaries, copyright policy) apply to providers from August 2025 — deployers inherit downstream duties.

How complete are your logs and audit trails?

Record-keeping — who did what, when, and why — is a core obligation for high-risk systems and the backbone of any incident defense.

What does human oversight look like for your AI's decisions?

The Act requires human oversight proportionate to risk — the higher the stakes, the closer the human must be.

Is your training and fine-tuning data documented?

Data governance — sources, lineage, consent, and rights — is a named high-risk obligation and a frequent audit target.

Do you have an AI incident response plan?

Serious incidents must be reported to regulators; the plan has to exist before the incident, not after.

Do you maintain technical documentation for each AI system?

High-risk providers must keep technical documentation that lets regulators assess compliance — and deployers need their own records.

How do you test for accuracy, robustness, and abuse?

Accuracy, robustness, and cybersecurity are explicit high-risk requirements — including adversarial and red-team testing proportionate to risk.

How do you monitor your AI after deployment?

Post-market monitoring — catching drift, misuse, and degradation — is a deployer obligation under the Act.

0/ 100

Your prioritized fix list

This is an informational self-assessment, not legal advice. It scores operational readiness — it does not determine your legal classification under the EU AI Act. For binding answers, consult qualified counsel.

How scoring works

Each of the 10 answers earns 0–3 points, for a maximum of 30. Your score is that total scaled to 100. The fix list below your score is sorted by impact: each gap is weighted by how much regulators care — a missing audit trail on a high-risk system outranks a missing document on a pilot, and your list reflects that.

How the Governed Agent Mesh Playbook helps

The checker finds your gaps; closing them takes a system. The Governed Agent Mesh Playbook — Studio Edition ($29) is a 20-page field manual for exactly this work: use-case tiering worksheets so you know which obligations apply to you, approval-gate patterns that put humans back in the loop, audit-trail templates that satisfy record-keeping, and an incident-response runbook you can adapt instead of writing from scratch. Every critical fix on your list maps to a section of the playbook.

FAQ

What is the EU AI Act?

The EU AI Act is the European Union's comprehensive law regulating artificial intelligence, in force since August 2024. It takes a risk-based approach: AI systems are sorted into prohibited, high-risk, limited-risk (transparency obligations), and minimal-risk tiers, each with its own set of obligations.

Does the EU AI Act apply to companies outside the EU?

Yes, it has extraterritorial reach. It applies to providers and deployers whose AI systems are placed on the EU market or whose outputs are used in the EU — even if the company itself is based elsewhere. If your AI product or service touches EU users, it likely applies.

When do the EU AI Act's main obligations take effect?

The Act phases in: prohibitions applied from February 2025, general-purpose AI model obligations from August 2025, and the full obligations for high-risk AI systems apply from August 2026 (some extended to 2027). Companies deploying AI now should be preparing, not waiting.

What counts as a high-risk AI system?

High-risk systems include AI used for recruitment and worker management, access to education, creditworthiness and insurance pricing, law enforcement, migration, biometric identification, safety components of regulated products, and certain uses in critical infrastructure, among others listed in Annex III of the Act.

What are the fines under the EU AI Act?

Fines scale with the violation: up to €35 million or 7% of global annual turnover for prohibited AI practices, up to €15 million or 3% for most other violations, and up to €7.5 million or 1.5% for supplying incorrect or misleading information.

Is this checker legal advice?

No. This tool is an informational self-assessment for operational readiness — it is not legal advice and does not determine your legal classification under the Act. For binding answers, consult qualified counsel.

Put your fix list into practice

The Governed Agent Mesh Playbook — Studio Edition ($29) gives you the full system behind every fix: tiering, approvals, spend controls, and incident response, ready to run.

Get the Studio Edition — $29

Or browse the full catalog of products →