Skip to main content

Pricing

AIMSGovernance workspace
Arelis HubDeveloper console

Home
Resources
EU AI Act checklist

Free checklist

EU AI Act compliance checklist

58 requirements in 9 areas, from scoping your role to high-risk conformity assessment. Tick items off as you go; your progress stays in this browser.

Classify a system first Read the EU AI Act guide

Updated October 2026 for Regulation (EU) 2026/1744 (Digital Omnibus on AI).

0 of 58 items done

1. Scope & Role Identification0/4
- Determine if your organization is a provider, deployer, importer, distributor, or product manufacturer
- Assess if your AI systems fall within the EU AI Act scope (including location considerations)
- Identify exclusions that may apply (military/defense, R&D, personal non-professional use)
- Document your organization's roles and responsibilities under the AI Act
2. Risk Assessment & Classification0/5
- Determine the risk category of your AI systems (unacceptable, high-risk, limited risk, minimal)
- For high-risk systems, verify if they fall under Annex I (product safety) or Annex III (specific use cases)
- Check for possible derogations from high-risk classification (Article 6(3))
- Document justification for risk classification with evidence
- Review classification periodically or when system functionality changes
3. High-Risk Systems - Data & Documentation0/7
- Implement data governance with quality control for training, validation and testing data (Article 10)
- Address potential biases with appropriate mitigation plans
- Create comprehensive technical documentation per Annex IV requirements
- Maintain version control for all documentation
- Prepare clear instructions for use with operational guidelines and limitations
- Document system architecture, algorithms, and data specifications
- Prepare privacy and data protection impact assessment if applicable
4. High-Risk Systems - Technical Measures0/7
- Implement risk management system covering entire lifecycle (Article 9)
- Establish automatic logging capabilities for operations and decisions (Article 12)
- Design for appropriate levels of accuracy for intended purpose (Article 15)
- Implement robustness measures against errors and attacks (Article 15)
- Ensure appropriate cybersecurity protections (Article 15)
- Develop testing protocols for compliance verification
- Implement model monitoring for performance drift detection
5. Human Oversight & Transparency0/7
- Establish human oversight mechanisms with clear roles (Article 14)
- Design interfaces that enable effective human oversight
- Create procedures for human intervention or system shutdown
- For Article 50 systems, implement required transparency measures
- Ensure users know when interacting with AI (unless obvious)
- Label AI-generated/manipulated content appropriately
- Document all transparency and oversight measures
6. Conformity Assessment & Registration0/7
- Determine applicable conformity assessment procedure (self-assessment or notified body) (Article 43)
- Conduct thorough conformity assessment against all requirements
- Produce EU declaration of conformity document
- Affix CE marking to compliant systems (Article 48)
- Register high-risk AI systems in EU database (Article 49)
- For public authority deployers, register your use of high-risk systems
- Conduct Fundamental Rights Impact Assessment if required (Article 27)
7. GPAI Model Requirements0/7
- Create and maintain technical documentation per Annex XI
- Provide information to downstream AI system providers (Annex XII)
- Establish copyright compliance policy
- Publish summary of content used for training
- For systemic risk models: evaluate model capabilities and limitations
- For systemic risk models: assess and mitigate systemic risks
- For systemic risk models: report serious incidents to AI Office
8. Organizational Governance0/7
- Assign staff responsible for compliance and define reporting lines
- Train staff on EU AI Act requirements and compliance procedures
- Establish incident reporting and management procedures
- Implement document management system for compliance evidence
- Create communication protocols for regulatory interactions
- Schedule regular compliance reviews and updates
- Establish procedures for handling non-compliance issues
9. Compliance Timeline Planning0/7
- Map each AI system to the obligations and dates that apply to it
- Confirm no prohibited practices are in use (in force since 2 February 2025)
- If you provide general-purpose AI models, meet the GPAI obligations (in force since 2 August 2025)
- Implement Article 50 transparency measures (from 2 August 2026; machine-readable marking for systems already on the market by 2 December 2026)
- Prepare Annex III high-risk systems for 2 December 2027
- Prepare high-risk AI in regulated products (Annex I) for 2 August 2028
- Allocate resources and budget for compliance activities

General information to help you plan, not legal advice. Obligations depend on your role and systems. Source: Regulation (EU) 2024/1689. Track these requirements with owners and evidence in AIMS.

Turn the checklist into an evidence trail

AIMS assigns each requirement to an owner, links the evidence and shows what is due next.

Book a demo Start free (opens in a new tab)

Footer

AIMS is the AI management system for ISO/IEC 42001 and the EU AI Act. Arelis Hub gives your teams governed access to every major model.

Arelis AI UG (haftungsbeschränkt)
Im Zollhafen 18, 50678 Cologne
contact@arelis.digital
+49 178 4082174

The AI governance briefing

What changed in the AI Act and ISO 42001, and what it means for your programme. Monthly, no fluff.

Work email

Double opt-in. Unsubscribe any time. Privacy policy

Platform

AIMS
Arelis Hub
AIMS features
Pricing

Solutions

EU AI Act compliance
ISO/IEC 42001
Consulting

Resources

AI Act risk classifier
ISO 42001 template pack
EU AI Act checklist
Blog

Company

About
Team
Trust & security
Contact

Legal

Privacy Policy
Terms of Service
Impressum

© 2026 Arelis AI UG (haftungsbeschränkt). All rights reserved.

Built for the EU AI Act
Aligned with ISO/IEC 42001
Google for Startups Cloud Program