Cybersecurity for businesses

Free cybersecurity assessment
ENES
Contact

Does the EU AI Act apply to me?

Answer a few questions about one specific AI system (or a general-purpose AI model), how you use it and your role, and we will tell you what the EU AI Act requires of you, with the article and the dates behind each conclusion. If you have several systems, repeat the check for each one. Free and with no sign-up: you see the full result on screen, without leaving your email.

Up to 20 questions depending on your answers · about 7 min. One question per screen, with “I don't know” where it is accepted and the reason for each question. We only ask what affects your case: you often finish sooner.

Regulation (EU) 2024/1689, as amended by Regulation (EU) 2026/1744, applies obligation by obligation: prohibited practices and AI literacy since 2 February 2025; transparency since 2 August 2026, with transitional periods. · Reviewed 20 October 2026

Status of the regulation: Regulation (EU) 2024/1689, as amended by Regulation (EU) 2026/1744, applies obligation by obligation: prohibited practices and AI literacy since 2 February 2025; transparency since 2 August 2026, with transitional periods. High-risk rules for Annex III apply from 2 December 2027 and for Annex I, Section A, from 2 August 2028 (Arts 111 and 113). Rules reviewed on 20 October 2026.

What we look at

  • Your role regarding a specific system or model, its link with the EU and the exclusions (Arts 2 and 3).
  • The practices that call for a review of the prohibitions and the possible high risk by use or by product (Arts 5 and 6; Annexes I and III).
  • Transparency, general-purpose AI models and agreements along the value chain (Arts 25, 50 and 53).
  • The dates, systems already on the market and the transitional conditions of each obligation (Arts 111 and 113).

What it is not

For guidance only; this is not legal advice. This check applies its rules to your answers with the information available on 20 October 2026. It does not replace a professional analysis of your case, it does not certify compliance and it may not cover exceptions or national rules that affect you. If your result is “Probably” or “We cannot determine it”, review it with your legal adviser.

Your answers

Unless you request the report, your answers stay in your browser and we do not send them to our servers; they are deleted after two hours, when you close the tab or when you press “Delete my answers”. We count which result comes out in aggregate, without keeping any of your data. If you accept analytics cookies, Google Analytics receives which check you use, how many steps you take and the result, not your answers.

If you take another check in this tab, we reuse the answers about your company's size that you have already given, so we do not ask for them again. They stay only in this browser and you can change them at any time.

Frequently asked questions

What are the basic rules of the EU AI Act?

The Regulation works by risk: it prohibits some practices (Art. 5), sets requirements for high-risk systems (Arts 6 to 49), imposes transparency on certain systems, such as those that interact with people or generate content (Art. 50), and regulates general-purpose AI models (Arts 51 to 56). Providers and deployers must also take AI literacy measures (Art. 4).

Since when does the EU AI Act apply?

Regulation (EU) 2024/1689 has been in force since 1 August 2024 and applies in phases (Art. 113): prohibited practices and AI literacy since 2 February 2025; general-purpose AI models since 2 August 2025; transparency since 2 August 2026, with transitional periods; and high-risk rules from 2 December 2027 (Annex III) and 2 August 2028 (Annex I, Section A), under Regulation (EU) 2026/1744.

Does it apply to me if I only use AI assistants?

Using an assistant in your professional activity can make you a deployer (Art. 3(4)). That does not by itself make it a high-risk system: its purpose and its use matter. The check separates your role, the AI literacy measures of Art. 4 and the transparency cases of Art. 50.

What is a high-risk AI system?

Art. 6 distinguishes certain products or safety components covered by Annex I and the uses listed in Annex III, such as some recruitment systems. There are conditions and exceptions: the sector or the “AI” label are not enough to classify it.

Have the high-risk rules been postponed?

Yes: Regulation (EU) 2026/1744 sets 2 December 2027 for Annex III and 2 August 2028 for Annex I, Section A. Section B has a different regime (Art. 2(2)). Systems already on the market require a review of the transition in Art. 111(2).

What do I have to do now?

It depends on your role and the system. The prohibitions and the AI literacy measures have applied since 2 February 2025; the amended Art. 4 requires measures to support the promotion of AI literacy, not to ensure a specific level. Transparency applies from 2 August 2026, with transitional periods. On 2 December 2026 new prohibitions arrive, as does the marking under Art. 50(2) for systems placed on the market before 2 August 2026 (Art. 111(4)). The result separates each obligation and its date.

Who supervises the AI Act?

Each Member State designates its market surveillance authorities, and the competent authority depends on the subject matter and the system; the Commission publishes the list of national contact points. We do not offer a closed list of designated authorities.

Official sources

Rules reviewed on 20 October 2026.

Version reference, in case you write to us: 2026.10.12-r6

Changes to the rules
  • 20 October 2026 · version 2026.10.12-r6. First complete version: roles as a set (provider, deployer, importer, distributor, product manufacturer, authorised representative, provider of general-purpose AI models and supplier in the value chain), prohibited practices, high risk under Annexes I and III with the exception in Art. 6(3), transparency by role, AI literacy and the dates of Regulation (EU) 2026/1744.

Keep going

Other free tools