EU AI Act Compliance Checklist 2026
Step-by-step compliance checklist for high-risk AI systems under Annex III. Covers Article 9–14 obligations, Annex IV technical documentation, and EU database registration.
Start free — implement the checklistTwo ways to get prepared
Free official resources
Use these for the regulation text, the EU's own assessment, and direct guidance from the European Commission:
AIAgentree Implementation Playbook
Platform-specific implementation guide: how to satisfy Articles 9–14 with AIAgentree, with code samples, dashboards, and Annex IV templates.
- Article 12 logging — SDK install + automatic decision-trace capture, code samples in Python and TypeScript
- Article 14 human oversight — approval queue setup, override workflow configuration, escalation alert templates
- Annex IV technical documentation — pre-filled template for AIAgentree-instrumented systems
- Article 11 + Annex IV evidence export — one-click PDF/JSON/CSV reports for regulators
- Conformity assessment checklist — what notified bodies will ask for, page by page
This is the playbook for engineering teams using AIAgentree, not a copy of the regulation. For the regulation text and the EU's own assessment tools, see the official sources above.
1. Pre-Assessment
- Complete inventory of all AI systems (production + development)
- Article 6 risk classification for each system
- Annex III category identification where applicable
- Article 6(3) exemption assessment, with documented reasoning
2. Article 9: Risk Management
- Risk identification process documented
- Risk estimation and evaluation methodology
- Mitigation measures defined and tested
- Residual risk testing procedures
- Post-market monitoring plan
3. Article 10: Data Governance
- Training data quality controls
- Bias detection and mitigation procedures
- Data relevance and representativeness verification
- Data completeness checks
- Retention and access policies
4. Article 11 + Annex IV: Technical Documentation
- System description and intended purpose
- Development process documentation
- Algorithm specifications
- Training methodology
- Performance metrics and validation results
5. Article 12: Automatic Logging
- Automatic event logging with timestamps
- Input/output capture
- Human interaction logging
- Immutable, tamper-evident records
- Export capability for regulators
Article 13: Transparency to Deployers
- Instructions for use provided — concise, complete, correct and clear information on the system's characteristics, capabilities and performance limitations
- Provider identity and contact details included in the accompanying documentation
- Known and foreseeable limitations, risks of misuse and circumstances that may create risks documented for deployers
- Human-oversight measures and the technical means deployers need to interpret and use the system's output correctly specified
6. Article 14: Human Oversight
- Oversight interface accessible to designated humans
- Override and interruption capability
- Intervention procedures documented
- Escalation workflows defined
7. EU Database Registration
- EU AI database entry submitted
- Conformity declaration filed
- CE marking affixed (where applicable)
EU AI Act Implementation Playbook for AIAgentree
Article 9–14 mapped to platform features, with code samples and Annex IV documentation templates.
Start free — implement the checklistThis is the playbook for engineering teams using AIAgentree, not a copy of the regulation. For the regulation text and the EU's own assessment tools, see the official sources above.
Continue exploring the EU AI Act guide
EU AI Act Compliance Guide
The complete guide to EU AI Act compliance for AI agents — start here.
Article 12 — Record-Keeping & Logging
What every high-risk AI system must log, and how to capture it.
Article 14 — Human Oversight
Designing effective human-in-the-loop controls for AI decisions.
Annex III — High-Risk AI Systems
Which AI use cases the Act classifies as high-risk.
Compliance Cost Calculator
Estimate your EU AI Act compliance effort and cost.
Deadlines & Timeline
Key enforcement dates, including the August 2, 2026 deadline.
Fines & Penalties
Penalty tiers up to €35M or 7% of global annual turnover.
Transparency Obligations (Art. 13 & 50)
Disclosure duties for AI systems and their outputs.
Risk Management & Conformity Assessment
Build a risk management system and assess conformity.
GPAI Obligations
Rules for providers of general-purpose AI models.
EU AI Act for US Companies
Extraterritorial scope and what US providers must do.
Omnibus Update
The latest changes to the EU AI Act timeline and rules.
Penalty Calculator
Estimate your maximum fine under the Article 99 tiers.
Article 11 + Annex IV
What technical documentation the EU AI Act requires.
Article 26: Deployer Obligations
What deployers of high-risk AI must do, including log retention.
Article 17: Quality Management
The QMS providers of high-risk AI must document.
Article 10: Data Governance
Data quality, bias mitigation, and governance duties.
Article 4: AI Literacy
The staff AI-literacy duty in force since February 2025.
Deployer vs Provider
Who bears which obligation — and when a deployer becomes a provider.
FRIA (Article 27)
Who must run a Fundamental Rights Impact Assessment, and how.
Who Does It Apply To?
Scope, operators, and the extraterritorial reach of the EU AI Act.
Post-Market Monitoring
Articles 72–73: ongoing monitoring and incident reporting.
ISO 42001 vs EU AI Act
How the voluntary standard and the binding law fit together.
NIST AI RMF vs EU AI Act
A practical crosswalk between the framework and the law.
EU AI Act for Healthcare
High-risk medical AI, MDR/IVDR interplay, and clinician oversight.
EU AI Act for Financial Services
Credit scoring, insurance pricing, and existing financial regulation.
EU AI Act for HR & Employment
Hiring AI as high-risk, plus NYC LL144 and EEOC overlap.