Versatile AI Risk Assessment
Knowledge baseQuick check

Which dates of the AI Act apply to your system?

Answer the questions. Alongside, your deadline plan takes shape: all eight dates of the regulation, with the ones that affect your system highlighted, each with the obligations behind it.

37

Days until 2 December 2026. Two further prohibitions then apply, and generative systems placed on the market before 2 August 2026 must have retrofitted their marking.

In which role are you responsible for the system?Art. 3, Art. 25

The role determines which obligations apply to you. Select an option to see the definition.

Does any of these practices apply to the system?Art. 5(1)(a) to (h), (ba) and (bb)

Prohibitions apply to all roles and do not depend on a risk class. For systems that generate content, what counts for providers is also what is foreseeably possible without substantial technical modification.

Does the system itself, or the product in which it operates, fall under one of these EU product laws?Art. 6(1), Annex I

This covers AI that is itself a regulated product or operates within one. Two follow‑up questions determine whether it thereby becomes high‑risk.

Section A · Obligations under the AI Act, checked in the product’s conformity assessment
Section B · Requirements come through the relevant sectoral law
Is the system used in one of these areas?Art. 6(2), Annex III

What matters is the intended purpose, i.e. what the system is meant to be used for. If one applies, a follow‑up question on the exception in Art. 6(3) follows.

Does any of these characteristics apply?Art. 50(1) to (4)

Some obligations are addressed to providers, others to deployers. The plan shows only the obligations of your role.

Does the system process personal data?GDPR

The GDPR then applies alongside the AI Act. The plan shows whether an impact assessment is indicated.

Your deadline plan · 6 questions openTo the plan
Related
Obligations compass

Which obligations might be relevant? Use the compass to explore your role and risk class further and look up the associated dates.

To the obligations compass
Threat catalogue

The risks behind the classification: 52 threats with mitigations and verified sources.

To the catalogue
EU‑KI‑VO‑Check

The full assessment under the EU AI Act as a free single module: guided down to the risk class, with 261 controls and evidence tracking.

See the module
Glossary

Risk classes, DPIA, GPAI and more: the terms behind the questions, precisely explained.

To the glossary
Interactive analyses

Ten analyses show how threats unfold, which of them match your own system type, and where mitigations take effect.

Open the analyses