Public-benefit foundation · UIC 208908769 · Sofia Transparency
ISDI Institute for Sustainable
Development and Innovation
Menu

Home · Free tools · Governance tool

EU AI Act obligations checker

Seven questions to work out which obligations plausibly reach you, and in which role. Nothing you enter leaves your browser, and no email is required.

First-pass orientation Not legal advice Nothing stored

Question 01 / 07 Is your organisation established in the EU, or do you place AI systems on the EU market?

The Regulation also reaches organisations outside the EU whose system output is used in the EU.

Question 02 / 07 How did you come by the AI system?

This determines which set of duties applies to you, and it changes the answer more than anything else.

Question 03 / 07 Have you put your own name on it, retrained it on your own data, or changed what it is used for?

Article 25 can transfer a provider’s obligations to you if you do any of these to a high-risk system.

Question 04 / 07 Does it infer emotions of workers, score people socially, or categorise people biometrically?

Emotion inference in the workplace is prohibited except for medical or safety reasons. Workforce “engagement analytics” can fall here.

Question 05 / 07 Is it used in recruitment, selection, promotion, termination, task allocation or performance monitoring?

Annex III(4). This is the provision most likely to catch an industrial employer, usually via an HR tool.

Question 06 / 07 Is it a safety component in the operation of electricity, gas, heating, water, road traffic or critical digital infrastructure?

Annex III(2). Optimising your own consumption behind the meter is not operating the supply.

Question 07 / 07 Does it interact directly with people, or generate synthetic text, image, audio or video?

Article 50 requires disclosure that a person is dealing with an AI system, and machine-readable marking of synthetic content.

What this tool is not

It is a first-pass orientation aid, not a compliance assessment and not legal advice. It simplifies deliberately: Annex III lists eight high-risk areas and this asks about two, the high-risk regime carries requirements it does not enumerate, and sector-specific legislation can change the answer entirely.

What it should give you is a defensible starting position and a short list of things to document — enough to make a conversation with a specialist brief and specific. The full guide sets out the reasoning.