The EU AI Act (Regulation (EU) 2024/1689) applies to any provider placing AI systems on the EU market — including SaaS platforms with EU users. With transparency obligations applying from 2 August 2026, this checklist is the minimum starting point.
1. Classify your system
Confirmed whether your product is an AI system (Art. 3(1)) — ML or logic-based systems generating outputs.
Checked prohibited practices (Art. 5): manipulation, social scoring, real-time biometric ID, emotion inference in workplace/education.
Determined high-risk status (Annex III): employment, credit, education, biometrics, critical infrastructure, and more.
Checked GPAI status (Art. 51): general-purpose models above 10^25 FLOPs.
2. Risk management (Art. 9)
Risk management system established: identification, evaluation, mitigation of risks to health, safety, fundamental rights.
Reasonably foreseeable misuse documented.
Residual risk accepted at an appropriate level, with evidence.
3. Documentation
Technical documentation prepared per Art. 11 / Annex IV (architecture, data, oversight, accuracy/robustness results).
Logging capabilities (Art. 12) for high-risk systems.
Record of changes and version history.
4. Transparency (Art. 50)
Users informed they are interacting with an AI system (chatbots/conversational AI).