EU AI Act · Regulation (EU) 2024/1689

The AI Act, as a checklist with dates.

List your AI systems, answer the questions the regulation actually asks, and get every obligation with its article, its deadline and the document that proves it. For deployers and providers of AI in the EU.

No sign-up for the check · 14-day trial without a card

compliance.vyonica.com / Acme GmbH● live
Readiness62%
● 14 met● 6 partial● 3 missing
Obligation timeline
  1. 2 Aug 2026Most obligations apply
  2. 2 Dec 2027Annex III high-risk
  3. 2 Aug 2028Annex I high-risk
Document coverage
  • AI inventory100%
  • Risk assessment80%
  • AI literacy programme45%
  • Art. 50 notice20%
CoversArt. 4Art. 5Art. 6 / IIIArt. 9-15Art. 26Art. 27Art. 49Art. 50Art. 73and the annexes

Application dates · Art. 113

  1. Art. 113(a)

    2 February 2025

    Prohibited practices and AI literacy apply

    In force

  2. Art. 113(b)

    2 August 2025

    General-purpose AI model obligations apply

    In force

  3. Art. 113

    2 August 2026

    Transparency duties and most other obligations apply

    In force

  4. Art. 113(c), Art. 111

    2 December 2027

    High-risk systems listed in Annex III

    389 days left

  5. Art. 113(c)

    2 August 2028

    High-risk systems embedded in regulated products

    633 days left

Who you are under the Act

Deployer or provider: different lists, same deadlines.

The regulation assigns obligations by role, not by company size. The first question we ask is which one you are, per system.

Art. 3(4) · Art. 26

Deployer

You use an AI system under your own authority: a recruiting tool, a credit score, a chatbot on your site.

  • Use the system according to its instructions and keep logs
  • Assign human oversight and train the people involved (Art. 4)
  • Inform affected workers and natural persons
  • Carry out a fundamental rights impact assessment where Art. 27 applies

Art. 3(3) · Art. 16

Provider

You develop an AI system or model and place it on the EU market, under your name or trademark.

  • Risk management, data governance and technical documentation (Art. 9 to 11)
  • Conformity assessment, declaration and CE marking for high-risk systems
  • Registration in the EU database before placing on the market
  • Post-market monitoring and serious-incident reporting (Art. 72, 73)

Many companies are both: a provider for the product they sell and a deployer for the tools they buy.

01 · Inventory

Every AI system in one register, with an owner.

Start with what you actually run: bought, built or embedded. Each entry carries its intended purpose, its role under the Act and the person responsible, so nothing is classified twice or forgotten.

Art. 3(1) definition of an AI system · Recital 12

AI inventory

  • CV screening (vendor SaaS)High-risk
  • Customer chatbotTransparency
  • Demand forecastingMinimal
02 · Classification

Nine questions, in the order the regulation asks them.

Role, EU scope, prohibited practices, general-purpose models, Annex I, Annex III, the Art. 6(3) exemptions, transparency flags and the SME flag. The assistant proposes with verbatim quotes; a person in your organisation decides.

Art. 5 · Art. 6 · Annex III · Art. 50 · Art. 62

Classification wizard

  1. 1Role: deployer or provider?
  2. 2EU scope: placed on the market or used in the Union?
  3. 3Art. 5: any prohibited practice?
  4. 4Annex III: listed area?
  5. 5Art. 50: interacts with people or generates content?

Role and risk class are set by a person, never by the assistant.

03 · Obligations by date

A register of duties, grouped by when they bite.

Each obligation shows the article text in your language, the date it applies from, the evidence that satisfies it and who owns it. Already in force, due next, due later: three waves, no surprises.

Art. 113 application dates · Art. 111 transitional rules

Obligations by wave

In force

  • Art. 4 AI literacy
  • Art. 50(1) chatbot disclosure

Due next

  • Art. 26 deployer duties
  • Art. 27 fundamental rights impact assessment

Due later

  • Annex I product obligations
04 · Documents and evidence

Templates that know which section is still empty.

Each obligation points to the document that satisfies it: literacy record, Art. 50 notice, FRIA, Annex IV technical file. Sections carry coverage badges, uploads get a hash in the evidence ledger, and AI-drafted text is marked as such.

Art. 11, Annex IV · Art. 18 record keeping · Art. 27 · Art. 50(5)

Document coverage

  • AI literacy recordcomplete
  • Art. 50 notice (EN/DE)complete
  • Fundamental rights impact assessment3 of 7 sections
  • Technical documentation, Annex IVnot started

Evidence ledger · 12 files · SHA-256

05 · Readiness and filings

One number per system, and the filing when the clock starts.

Readiness is the share of applicable checks with evidence behind them, broken down by wave. Filings are type-driven forms with the Art. 73 incident clock, frozen on submission and exportable for the authority.

Art. 49 registration · Art. 73 serious incidents: 15 days, 10 days after a death, 2 days for critical infrastructure

Readiness by wave

  • In force90%
  • Due next55%
  • Due later20%

Art. 73 incident report

Clock: 15 days · started 3 days ago

frozen on submission

06 · Literacy and transparency

The two duties every organisation already owes.

Art. 4 asks for measures, not certificates: a roster, a programme and dated attestations are the record. Art. 50 asks for disclosure and marking: a notice snippet in both languages, a marking policy and a public verifier link.

Art. 4 in force since 2 February 2025 · Art. 50 from 2 August 2026 · BNetzA documentation elements: type, content, date, participants

AI literacy roster

  • People team · 6 of 6 attested
  • Sales · 9 of 14 attested
  • Engineering · 4 of 11 attested

Art. 50 notice

You are talking to an AI system. A person can take over on request.

How we run it

Built to be shown to an auditor.

  • Hosted in the EU, with a data processing agreement
  • Official EN and DE text of the Act, with the corpus version shown
  • No training on your documents
  • Self-hosted fonts and cookieless analytics, so no cookie banner
  • SSO, SCIM and two-factor authentication
  • Export everything, any time
  • We apply Art. 50 to ourselves: AI-drafted text is always marked

Pricing

Priced per organisation, published here.

Monthly or yearly, excl. VAT. Yearly billing counts ten months. 14-day trial without a card.

Starter

€99per month

3 AI systems · deployer templates · readiness · PDF export

Professional

€249per month

15 AI systems · provider templates · FRIA · filings · API · consultant workspace

Scale

€499per month

50 AI systems · SSO/SCIM · subsidiaries · audit export · Art. 50 audio module

Free: the checker and one AI system preview, no card. · Enterprise on request · excl. VAT

See all plans

Questions

Eight things people ask before they start.

Start with one AI system.

Run the free check, keep the result as your first inventory entry, and invite your team when you are ready.