← STACK/HUB · SANCTIAGENT · RUBRIC v1.1

ANNEX/14

EU AI Act Classification

A structured classification worksheet for Annex I, Annex III, GPAI, transparency, provider and deployer roles. Fourteen questions, one accountable owner per field.

Method: self-assessment, not legal advice or independent assurance. Answer only where documentary evidence exists.

14 fields · ~3 minutes0 of 14 answered
01. A written inventory of every AI system you run or buy (in-house and third-party) exists
02. Each system is classified by risk tier: prohibited, high-risk, limited-risk, or minimal-risk
03. Systems embedded in Annex I regulated products are identified and mapped to that product's safety legislation
04. GPAI models in use (yours or a vendor's) are identified, and their systemic-risk status is understood
05. Article 50 transparency duties (disclosing AI interaction, marking synthetic content, emotion-recognition notice) are mapped to the affected systems
06. For each system, your legal role — provider, deployer, or both — is documented
07. Where you are a provider, the conformity-assessment route for that system is identified
08. Where you are a deployer of a high-risk system, your Article 26 operational duties are assigned to named owners
09. A fundamental-rights impact assessment is planned where the law or your risk policy requires one
10. High-risk systems have Article 12 logging and Article 14 human-oversight design controls specified
11. Incident-reporting duties (Articles 72–73) are assigned, with triggers and deadlines written down
12. Post-market monitoring covers every deployed system, with a named owner
13. Vendor contracts require notice of model/system changes and cooperation with your classification duties
14. A named owner tracks the Act's phased dates (2 Aug 2026 Article 50 · 2 Dec 2027 Annex III · 2 Aug 2028 Annex I)

Your classification score

Field-by-field
Full Classification Workbook — $99: 14-row evidence register, Annex I/III/GPAI role matrix, and 90-day remediation schedule. Unlock workbook →