EU AI Act compliance checklist

Scope & applicability

Confirm whether the Act applies to you — do you provide or deploy AI whose output is used in the EU?
Identify your role for each system: provider, deployer, importer or distributor.
Check whether any Article 25 change (rebrand, substantial modification, repurposing) makes you a provider.
Rule out any prohibited practice (Article 5) — these are already in force.

Inventory & classify

Build a register of every AI system and general-purpose model you use or provide.
For each, determine the risk tier: prohibited, high-risk, limited-risk or minimal.
Apply the Article 6(3) filter where relevant — and remember profiling keeps a system high-risk.
Record the application date that binds each system (2026 for Annex III, 2027 for Annex I, etc.).

Know your obligations

Derive the role-scoped obligations for each high-risk system.
Map limited-risk systems to the four Article 50 transparency duties.
Check general-purpose AI provider status (including via fine-tuning).
Assign an owner and a due date to each obligation.

Build the evidence

Stand up a risk-management system (Article 9) and data-governance practices (Article 10).
Compile technical documentation to Annex IV (Article 11) and enable logging (Article 12).
Design human-oversight measures (Article 14) and set accuracy / robustness targets (Article 15).
Attach evidence to each obligation and capture a dated sign-off.

Formalities for high-risk systems

Complete the conformity assessment (Article 43) — internal control or notified body.
Draw up the EU declaration of conformity and affix the CE marking (Articles 47–48).
Register the system in the EU database (Article 49), including Article 6(3) cases.
If you are a public body or in-scope deployer, complete the fundamental-rights impact assessment (Article 27).

Operate & maintain

Run post-market monitoring (Article 72) and keep logs for the required period.
Put a serious-incident reporting process in place with the correct deadlines (Article 73).
Ensure a sufficient level of AI literacy among staff operating the systems (Article 4).
Keep the register current as deadlines arrive and systems change.

This checklist is a plain-language aid for orientation and does not constitute legal advice or a determination of compliance. The authoritative source is Regulation (EU) 2024/1689.

Do this in the platform, not a spreadsheet.

Euridium turns these steps into a live register with owners, evidence and dated sign-offs — so the checklist stays current instead of going stale.

Open the platform Read the guides