Tool
EU AI Act Quick-Check
Five questions about your AI use case, you get a likely EU AI Act risk class (minimal, limited, high) with the specific obligations that apply. A technical indicator, not a legal assessment.
Question 1 of 5
What AI-powered feature does your system have?
What does the tool check?
Five questions about your AI-powered feature, enough to place your system in one of three risk classes under the EU AI Act:
- What AI-powered feature does your system have?
- Which data does the AI process?
- Does the AI make autonomous decisions?
- Where is the system deployed?
- Do users know they're interacting with AI?
You get:
- Risk class, minimal, limited, or high
- Drivers, the specific answers that pushed the classification up
- Obligations that apply, three concrete things you need to have in place
- What to do next, three practical first steps
Most SaaS and e-commerce setups land in minimal or limited. High-risk means Annex III territory (employment, credit, biometric identification, critical infrastructure), and a much longer compliance list.
Why it matters in 2026
The EU AI Act's main obligations apply from 2 August 2026. Limited-risk systems need transparency disclosures by then. High-risk systems need a conformity assessment, risk management, data governance, and human oversight, all documented.
Not a legal assessment
This is a technical classifier based on patterns of use. A full compliance review for a concrete system requires legal counsel and, for high-risk, a formal conformity assessment under Article 43. The output here is a starting point, not a verdict.
-
When does the EU AI Act apply?
The EU AI Act entered into force in 2024 with staged application. The central obligations for Limited- and High-Risk systems apply from 2 August 2026. Prohibitions for Unacceptable-Risk systems have applied since February 2025; GPAI (General Purpose AI) obligations since August 2025.
-
Which marketing tools fall under the EU AI Act?
Smart Bidding (Google Ads), Advantage+ (Meta), lookalike audiences, ML-based lead scoring, automated content personalisation, and recommendation engines all meet the definition. Most land as Limited Risk and need transparency disclosures, not as High Risk.
-
What's the difference between Limited Risk and High Risk?
Limited Risk means users must know they're interacting with AI (Art. 50). Example: a chatbot, a personalisation engine. High Risk (Annex III) means a formal conformity assessment under Art. 43, risk management, data governance, and human oversight, all documented. Example: AI for hiring decisions, credit scoring, biometric identification.
-
Does the tool replace a legal assessment?
No. It's a technical indicator based on common usage patterns, a starting point for the conversation with the DPO or legal team. The formal classification of a concrete system requires legal review and, for High-Risk, a conformity assessment with a Notified Body.
More than 2 red checks?
An Audit Sprint delivers a prioritised action plan in two weeks.
Request an Audit Sprint →