AI Act assessment

Answer 31 questions. You get the classification, the gap list per article and — if you attach an audit log — the evidence. Nothing is stored on this server.

1 · The system

Two things that always need to be known.

What does the system do? (one line) Sector

2 · Prohibited practices (Art. 5)

One “yes” here means the practice is prohibited; the rest does not help.

Does it score people by behaviour (social scoring)? Does it manipulate behaviour or exploit vulnerable groups? Does it predict crime of an individual (predictive policing)? Does it recognise emotions at work or in school? Does it build a face database from the internet/CCTV? Is it real-time biometric identification in a public place?

3 · High risk (Annex III)

These areas require the full control set (Art. 9–15, 17, 72, 73).

Does it use biometrics (face, voice, fingerprint)? Does it operate critical infrastructure (water, power, traffic)? Does it decide on admission or grading in education? Does it decide on hiring, performance review or dismissal? Does it decide on credit, insurance or public benefits? Is it used by police or the judiciary? Does it decide on migration or asylum? Does it help courts decide?

4 · Transparency (Art. 50)

Chatbots and synthetic content must be disclosed and marked.

Does it talk to people (chatbot/agent)? Does it generate text/image/audio that looks real?

5 · The controls that are checked

A “no” here becomes a gap in the report; “don’t know” is treated as a gap, not as an answer.

Is there human oversight and a stop button? Are logs kept and retained? Is accuracy measured before and during operation? Is there technical documentation? Is the data checked (quality, bias)? Is there a quality management system? Is the system monitored after release? Are incidents reported? Does the user know they are talking to AI? Is synthetic content marked?

6 · Context

Helps with the reasoning in the report.

Does it decide about people (job, credit, service, rights)? Does it decide without a human? Do children or vulnerable groups use it?

Show a filled example

Answers are used only to build this report. Nothing is sent anywhere: the assessment runs in this process.