Free tool · EU AI Act
AI system inventory template
List every AI tool you use or build, mark the ones that touch people or personal data, set a risk tier and download the register as CSV. It is the first document any AI Act programme needs. No signup, and nothing you type leaves your browser.
1 system need attention first: high-risk, or reaching people without a classification.
Not sure which tier a system is?
Classify each one in 3 minutes. The €49 Compliance Pack drafts the documents each tier needs.
What the law asks for
Why an inventory comes first
You cannot classify, train or document what you have not listed. The AI Act sorts systems into prohibited practices, high-risk uses, transparency duties and minimal risk, and most of your obligations depend on the tier. Shadow AI, such as an AI feature switched on inside software you already pay for, is the usual gap.
Keep one row per system, name an owner, record the vendor (you may rely on their documentation) and review the register twice a year. High-risk Annex III obligations apply from 2 December 2027 under the Digital Omnibus, but classification and literacy work cannot wait for that date.
Next: write your AI literacy policy, classify a system, or check your maximum exposure.
FAQ
Frequently asked questions
Does the AI Act require an AI inventory?
No article is titled “inventory”, but you cannot classify risk, meet deployer duties (Art. 26), support AI literacy (Art. 4) or answer a market surveillance authority without knowing which AI systems you run. An inventory is the practical first step of every compliance programme.
What counts as an AI system?
Any machine-based system that infers from its inputs how to generate outputs such as predictions, content, recommendations or decisions. That includes SaaS features with AI inside, such as a CV screener in your recruiting software, not only tools you built.
Which systems should I look at first?
Anything that reaches or affects people (customers, candidates, employees) and anything that uses personal data. High-risk uses in areas like employment, credit, education and essential services come first.
Is my data stored?
No. Everything stays in your browser and is lost when you close the tab, so download the CSV to keep it.
Is this legal advice?
No. It is an organising tool. Risk tiers depend on the exact use; run the free assessment for each system that matters.
General information about Regulation (EU) 2024/1689, updated 30 September 2026. Not legal advice.