EU AI Act › Checklist

EU AI Act Checklist for Businesses

Systematic overview of all compliance requirements – check step by step if your business meets the AI Regulation requirements.

Last updated: June 2026 · Source: Regulation (EU) 2024/1689

This checklist summarises the key requirements of the EU AI Act and helps you systematically assess your organisation's compliance status. Items are grouped by topic and cover both general and role-specific obligations.

1. Inventory & Risk Classification

All AI systems in use identified and inventoried

Each AI system assigned to a risk class (prohibited, high, limited, minimal)

Check for prohibited AI practices (Art. 5) completed

Own role determined: provider, deployer, importer or distributor

High-risk AI systems documented separately

2. Documentation & Transparency

Technical documentation for high-risk AI created (Art. 11)

Conformity assessment conducted or planned (Art. 43)

Transparency obligations checked: users informed about AI use (Art. 50)

AI-generated content appropriately labelled

Retention requirements for logs and documentation established

3. Governance & Risk Management

AI risk management system established (Art. 9)

Human oversight for high-risk AI ensured (Art. 14)

Data quality requirements reviewed (Art. 10)

Fundamental rights impact assessment for deployers completed (Art. 27)

Responsible person / AI officer designated

4. Training & Organisation

AI competency training for relevant staff completed (Art. 4)

Training records documented and archived

Internal processes for AI incident reporting established (Art. 62)

Regular review and update of compliance measures planned

Key deadlines at a glance

2 February 2025

Ban on prohibited AI practices + AI competency obligation (Art. 4)

2 August 2025

Obligations for GPAI models (General Purpose AI)

2 August 2026

All high-risk AI obligations fully applicable

2 August 2027

Remaining obligations for embedded high-risk AI

Practical example: Checklist in action

An e-commerce company uses AI for personalised product recommendations and a chatbot. Using the checklist, the team found: product recommendations fall under "minimal risk" (no special obligations), but the chatbot requires transparency labelling under Art. 50. Through systematic review, missing notices were added and training for the marketing team was initiated.