AI Act High-Risk Classification: Free 5-Minute Diagnostic

Step 1 of 13
Question 1
Is your AI system used in any EU member state, or does it affect people in the EU?
Article 2(1) territorial scope. Includes the case where outputs reach EU users.
Yes
No
Question 2
Is your AI system used for any of these purposes?
Select all that apply. Article 5 prohibited practices.
Social scoring leading to detrimental treatment (by any actor, public or private)
Real-time remote biometric identification in publicly accessible spaces
Subliminal, manipulative, or deceptive techniques causing harm
Exploiting vulnerabilities of age, disability, or socio-economic situation
Emotion recognition in workplace or education
Untargeted scraping of facial images for recognition databases
Biometric categorisation inferring sensitive attributes (race, religion, political opinion, sexual orientation, trade union membership)
Predictive policing based solely on profiling or personality assessment
None of these
Question 3
Is your AI system exempt from the AI Act?
Select all that apply. Article 2 carve-outs.
Used exclusively for military, defence, or national security
Used purely for scientific research and development
Pre-market research, testing, or development before placing on market
Personal non-professional use only
Free and open-source release (not high-risk, not prohibited)
None of these exemptions apply
Question 4
Is your AI system a safety component of a regulated product that requires third-party conformity assessment?
Article 6(1) and Annex I: medical devices, machinery, toys, lifts, vehicles, in-vitro diagnostics, pressure equipment, radio equipment, etc.
Yes
No
Not sure
Question 5
Which best describes your AI system's primary use?
Article 6(2) and Annex III categories, or general-purpose AI.
Biometric identification (post-remote, not real-time in public)
Critical infrastructure management or operation
Education or vocational training (access, assessment, monitoring)
Employment (recruitment, screening, evaluation, task allocation)
Essential private and public services (credit scoring, insurance pricing, emergency response triage)
Law enforcement (risk assessment, polygraph, evidence evaluation)
Migration, asylum, and border control
Administration of justice and democratic processes
General-purpose AI model or foundation model
None of the above
Question 6
Does your system only perform a narrow procedural task, improve the result of a prior human activity, detect decision-making patterns without replacing the human decision, or perform a preparatory task?
Article 6(3) derogation from high-risk classification.
Yes
No
Question 6 — follow-up
Does the system profile natural persons?
Profiling forces high-risk regardless of Article 6(3).
Yes
No
Question 7
Does your GPAI model have cumulative training compute of 10²⁵ FLOPs or more, or has it been designated systemic-risk by the Commission?
Article 51(2) systemic-risk threshold.
Yes
No
Don't know
Question 8
Does your AI system interact directly with people, generate synthetic content (text, audio, image, video), perform emotion recognition, or perform biometric categorisation?
Article 50 transparency obligations.
Yes
No
Question 9
What is your role in the AI value chain?
Determines which obligation set applies.
Provider — I develop the AI system
Deployer — I use an AI system developed by others
Importer — I bring non-EU AI systems to the EU market
Distributor — I make AI systems available on the EU market
Authorised representative (Article 22)
Product manufacturer integrating an AI system into a product (Article 25)
Question 10
Do you have a documented risk management system?
Article 9 — required for high-risk systems.
Yes
Partially
No
Question 11
Do you maintain technical documentation per Article 11?
Annex IV: training data, architecture, performance, conformity.
Yes
Partially
No
Question 12
Do you have human oversight mechanisms in place?
Article 14 — designed to enable human intervention.
Yes
Partially
No
Last step
Where should we send your classification report?

Your personalised AI Act classification report arrives as a PDF. No spam.

Analysing against Articles 5, 6, Annex III and 318,000+ regulatory documents...