EU AI ACT RISK CHECKER · RUNS IN YOUR BROWSER · NOTHING UPLOADED

Is your AI system prohibited, high-risk, or only a transparency case under the EU AI Act?

Choose your role and tick what the system does. You get a risk tier, the Article it rests on, your duties as provider, deployer, importer or distributor, and the dates.

A first read of Regulation (EU) 2024/1689. It reads only what you tick, and the boundaries of Annex III are still being clarified. It is not legal advice.

Exclusions (Article 2)
Prohibited practices (Article 5)
High-risk uses (Annex III)

Biometrics

Critical infrastructure

Education

Employment

Essential services

Law enforcement

Migration and border control

Justice and democracy

Regulated products (Annex I)
Transparency triggers (Article 50)

Choose your role and tick what applies, then click Check risk tier.

What it does, and what it leaves to you

Common questions

Does the EU AI Act apply to my company?

It applies to providers that place AI systems or general-purpose AI models on the EU market, to deployers established or located in the EU, and to providers and deployers elsewhere whose system's output is used in the EU (Article 2). Military, pure research and purely personal use are excluded. The page asks about each.

What are the risk levels in the AI Act?

Prohibited practices (Article 5), high-risk systems (Article 6 and Annex III, or products under Annex I), systems with transparency duties (Article 50), and everything else, which has no mandatory duties beyond AI literacy. General-purpose AI models have their own duties in Articles 51 to 55.

Is an AI hiring or CV screening tool high-risk?

Yes under Annex III point 4(a): AI used for recruitment, such as targeting job ads, filtering or ranking applications and evaluating candidates, is on the high-risk list. The exception in Article 6(3) does not apply if the system profiles people.

What does the AI Act require of a chatbot?

Under Article 50(1), providers must design systems that interact with people so that they are told they are dealing with AI, unless that is obvious. Providers of systems that generate synthetic audio, image, video or text must mark the output as machine-readable (Article 50(2)).

What are the fines?

Up to EUR 35 million or 7% of worldwide annual turnover for prohibited practices, EUR 15 million or 3% for most other breaches, and EUR 7.5 million or 1% for supplying incorrect information. Whichever is higher applies, except for SMEs and start-ups, where it is whichever is lower (Article 99).

Is my data uploaded anywhere?

No. Everything is calculated in your browser and nothing is sent; a test in the code asserts there are no network calls.