What does the tool check?
Five questions about your use case, enough for a first placement in one of the four EU AI Act risk classes:
- Does the system score people, infer emotions, recognise biometrics, generate content, or analyse data with no personal reference?
- What does the outcome help decide: credit, education and insurance, employment, marketing outreach, or none of those?
- Which role are you in, provider or deployer?
- Do users notice that AI is involved?
- How binding is the decision?
You get the likely class (prohibited, high risk, transparency duty, minimal risk) and the obligations that follow from it.
Most marketing and e-commerce setups land in transparency duty or minimal risk. High risk means Annex III territory (employment, credit, biometric identification, critical infrastructure) and a much longer compliance list.
What decides it is the subject of the decision, not your industry and not the volume of data. A lead score that sets the order of the sales queue is not in Annex III. The same score feeding a credit limit is.
Legal status, August 2026
The Article 50 transparency obligations have applied since 2 August 2026. Run a chatbot or publish AI-generated content, and you have to say so, enforced by the national market surveillance authorities, in Germany the Bundesnetzagentur, with fines up to €15M or 3% of global annual turnover. For systems already running before that date, machine-readable marking becomes mandatory on 2 December 2026. That one is next.
The Digital Omnibus deferred the high-risk obligations: conformity assessment, risk management, data governance and human oversight from 2 December 2027 (Annex III), and from 2 August 2028 for AI embedded in regulated products. The legal basis is Regulation (EU) 2026/1744, in force since 27 July 2026.
The long version of both topics is on the blog: what the Digital Omnibus changes and what marketing analytics has to learn from the AI Act.
Not a legal assessment
This is a technical classifier based on patterns of use. A full compliance review for a concrete system requires legal counsel and, for high-risk, a formal conformity assessment under Article 43. The output here is a starting point, not a verdict.