Question 1

How do I check if my organisation is AI compliant?

Accepted Answer

To check AI compliance, you need to assess whether your organisation has: (1) a documented inventory of all AI tools in use, (2) risk classification of each tool under the EU AI Act, (3) a written AI usage policy, (4) employee acknowledgements of that policy, (5) technical documentation for your AI systems, (6) monitoring of AI tool usage, and (7) the ability to produce an audit report on demand. Use our free AI compliance checker to score your organisation across all these areas instantly.

Question 2

What does the EU AI Act require from organisations?

Accepted Answer

The EU AI Act requires organisations to classify all AI systems by risk level (minimal, limited, high, or unacceptable risk), maintain technical documentation for each system, implement human oversight for high-risk AI, ensure transparency when users interact with AI, and register high-risk systems. High-risk AI system obligations apply from 2 December 2027 (updated via EU AI Omnibus, May 2026).

Question 3

What is an AI compliance score?

Accepted Answer

An AI compliance score is a percentage that reflects how well your organisation meets AI governance requirements. It typically measures whether you have an AI inventory, risk classification, usage policies, employee training, technical documentation, monitoring, and audit readiness. A score of 80% or above generally indicates strong compliance; below 50% indicates significant gaps that need to be addressed before regulatory enforcement.

Question 4

Is my company required to comply with the EU AI Act?

Accepted Answer

If your organisation develops, deploys, or uses AI systems and operates in the European Union or provides services to EU customers, you are likely subject to the EU AI Act. This includes companies headquartered outside the EU if their AI systems are used within the EU. The requirements vary depending on the risk category of your AI systems.

Question 5

What is shadow AI and why is it a compliance risk?

Accepted Answer

Shadow AI refers to AI tools that employees use without official approval or awareness from the organisation — such as using personal ChatGPT accounts for work tasks. This creates compliance risk because the organisation has no visibility into what data is being shared with these tools, cannot enforce policies, and cannot demonstrate governance to regulators. Monitoring employee AI tool usage is a key part of EU AI Act compliance.

Question 6

What compliance documents does the EU AI Act require?

Accepted Answer

Depending on the risk level of your AI systems, the EU AI Act may require: Technical Documentation describing the AI system's purpose, capabilities, and limitations; Conformity Declarations for high-risk systems; Transparency Notices for systems that interact with users; AI Usage Policies governing how staff use AI tools; and Data Privacy Notices covering AI data processing. High-risk systems have the most extensive documentation requirements.

Question 7

When does EU AI Act enforcement start?

Accepted Answer

The EU AI Act enforcement timeline is phased: prohibited AI practices became enforceable in February 2025; obligations for general-purpose AI models apply from August 2025; high-risk AI system obligations now apply from 2 December 2027 (extended via EU AI Omnibus, May 2026). Organisations should begin preparing now to ensure they meet all requirements before enforcement begins.

How AI-compliant is your
organisation?

Ask your AI about ComplyLayer

How AI-compliant is yourorganisation?

Ask your AI about ComplyLayer

How AI-compliant is your
organisation?