EU AI Act Readiness Checklist

About this resource

The EU AI Act is phasing in: GPAI enforcement began in August 2026 and high-risk obligations follow from 2 December 2027. This checklist walks through the practical assessment work required to know whether you are in scope, what your obligations are, and what evidence you need to produce. Built from the regulatory text and current guidance, structured so a compliance lead can work through it section by section.

• Territorial and material scope assessment (with the extraterritorial reach explained)
• Risk classification framework: prohibited, high-risk, limited-risk, minimal-risk
• Provider vs deployer obligations matrix
• Technical documentation checklist for high-risk AI
• Conformity assessment routes and what they require
• Transparency obligations covering general-purpose AI and generative AI
• Post-market monitoring requirements
• Penalty exposure mapping by article

• Heads of compliance, legal counsel, and risk officers preparing for the staged EU AI Act deadlines
• AI governance leads conducting initial scope assessment
• Procurement teams assessing vendor AI systems
• Boards seeking management assurance on AI Act readiness

The full analysis behind this resource is published in our insights, each linked to primary regulatory sources.