Skip to content
DPCert.org

Tools

Prepare your organisation for the EU AI Act

Know which systems you have, which risk tier each one falls into, which assessment to run and what to ask your vendors.

The flow

  1. Build the inventory of AI systemsFrom intake form to register row: use case record, internal risk rating and next steps.AI inventory template
  2. Classify the risk of each systemA guided questionnaire: risk tier, role in the value chain and indicative obligations under the EU AI Act.EU AI Act risk classifier
  3. Assess the impact of sensitive systemsHigh-risk screening, a risk matrix, measures and an AI section in a draft ready to review with your DPO.DPIA template
  4. Assess your AI vendorsFifteen questions on data, security, transparency and the EU AI Act, with a recommendation and contract clauses.AI vendor due diligence questionnaire
  5. Plan AI literacy trainingTraining by group of people, from general users to operators of high-risk systems, with the records that show what was done.AI literacy training plan