The EU AI Act: is your company in scope?
Ten questions with legal basis from Regulation (EU) 2024/1689, worked through in half an hour. The list is open and free of charge.
Ten questions with legal basis
Answer yes or no on every row. A yes means the requirement in the right-hand column applies to the company and needs to be documented.
| Question | Legal basis | What a yes means |
|---|---|---|
| 01Does the company develop, sell or use an AI system within the Union? | Article 2, scope | The regulation applies, also when the company sits outside the Union but the output is used here. |
| 02Is the company provider, deployer or importer of the system? | Article 3, definitions | The role decides which obligations follow, and it can shift during the contract term. |
| 03Does any of the prohibited practices occur in the business? | Article 5, prohibited practices | The use must end, the prohibition has applied since 2 February 2025. |
| 04Is the system used in any of the areas listed in Annex III? | Article 6 and Annex III | The system is high risk and the requirements on management system, data and logging apply. |
| 05Does a natural person meet the system without knowing it is AI? | Article 50, transparency | Information must be given, and generated content marked in machine readable form. |
| 06Do the staff using the system have sufficient AI literacy? | Article 4, competence | Training must be documented and kept current for the roles concerned. |
| 07Are the provider's instructions followed and the operation logged? | Article 26, deployer obligations | Logs must be kept and incidents reported to provider and authority. |
| 08Does the business build on a general purpose AI model? | Article 53, general purpose models | Technical documentation and a copyright policy are required from the model provider. |
| 09Is it clear which authority supervises the company? | Article 70, national authorities | The contact route and internal responsibilities should be written before supervision begins. |
| 10Is the board informed of the penalty levels? | Article 99, penalties | Infringements can cost up to 35 million euro or seven per cent of turnover. |
When the list shows the company is in scope
The next step is the basis itself: every article of the AI Act that concerns the company's role, with read date, hash and evidence chain per row, ready for the file.
Have the list sent to you
Source and read date
Every row rests on Regulation (EU) 2024/1689 in the wording read at the publisher on the stated day. The official wording prevails over every derived row.
2026-09-21
Reservation
The list is working material for compliance work and is not legal advice.
Ready-made pack
AI Act compliance pack
total 248.75 € (about 269 USD)
The basis for what you just read, ready for the file.
The AI Act as working material: the articles, the high-risk requirements, the documentation duties and a structure for the risk assessment.
Evidence chain, hash and read date per row. One-time purchase, delivered instantly.
Next step
Three ways to put the register to work in your own practice.
Start with your task
Litigation
Find support in a judgment
Search guiding decisions, see what became final and follow changes in the law.
In-house, deals
Map the rules in a transaction
Move from theme to act and on to the article that carries the duty.
Compliance
Assess the risk in a process
Risk scoring per legal area, with the sources behind every score.