RAISE.AI
THE RAISE METHOD · EU AI ACT

EU AI Act Quick-Check

Twelve questions. Five minutes. Where you actually stand against the obligations that apply to you, sent to your inbox with your answers, question by question.

The deadline everyone prepared for was moved. The one almost nobody is talking about is in .

Most organisations spent a year preparing for . Then the Digital Omnibus deferred the high-risk regime to and , and the parts that did come into force on schedule went largely unnoticed: the transparency duties in Article 50, which are live and enforceable now.

This is not a compliance assessment. It is twelve questions that tell you which obligations are actually yours, which of them have already started, and what to do first.

The obligations that apply to you depend on two things: whether you are in scope at all, and whether you are the provider or the deployer of each AI system. The first two questions settle both, and the rest of the check changes accordingly.

Part of the RAISE Method. Read how a RAISE assessment runs.

What applies now

StatusDateWhat
In force2 February 2025Prohibited practices (Article 5)
2 February 2025AI literacy (Article 4)
in force, softened by the omnibus to supporting the development of AI literacy among staff rather than guaranteeing a level
2 August 2025General-purpose AI model obligations (Articles 51 to 56), governance, national penalties
2 August 2026Article 50 transparency: chatbot disclosure, marking of generated content, emotion recognition notices, deepfake disclosure
2 August 2026Commission fines for general-purpose AI model providers (Article 101)
Next deadline2 December 2026Machine-readable marking of outputs for generative systems already on the market before 2 August 2026 (Article 111(4))
2 December 2026Two new Article 5 prohibitions: non-consensual intimate deepfakes, and child sexual abuse material
Ahead2 August 2027General-purpose AI models placed on the market before 2 August 2025
2 August 2027National AI regulatory sandbox
2 December 2027High-risk, Annex III stand-alone systems (employment, credit, education, biometrics)
ahead, deferred from 2 August 2026
28 January 2028Notified bodies to apply for designation
2 August 2028High-risk, Annex I systems embedded in regulated products (medical devices, machinery, lifts)
ahead, deferred from 2 August 2027
2 August 2030High-risk systems used by public authorities, including those already in service

Dates last reviewed on 3 November 2026.

How to score. For each question: 0 = no, or we do not know · 1 = partly, or started but not complete or not documented · 2 = yes, in place and documented. "We do not know" is a real answer and scores 0; guessing is the only unhelpful option.
Unlike the agent-rung scorecard, documentation counts here. The AI Act is largely a documentation regime: being able to show what you did is part of the obligation, not evidence of it.
A

Does your organisation place AI systems on the EU market, use AI within the EU, or produce AI output that is used in the EU?

Not scored. It decides whether the rest of the check applies to you.

B

For the AI you are most concerned about, are you the provider or the deployer?

Not scored. Most organisations are deployers. You are a provider if you develop an AI system, or substantially modify one, and place it on the market or put it into service under your own name.

Where should we e-mail your result?

Your score, the band it falls in, your twelve answers with the three lowest marked, and the dates that apply to you.

Your answers and contact details go to RAISE.AI (Gembitz Ltd) so we can send your result. We do not share them with anyone.

About the RAISE Method

A reference model of 60 capabilities an organisation must hold to run AI safely, each traced to a recognised standard (ISO/IEC 42001, the international AI management standard, and NIST's AI Risk Management Framework among them); a nine-rung ladder from foundations to autonomous agents, with a gate before each step; and generated board and technical plans that your board and your IT team can work from.

Built on twenty years of Microsoft enterprise architecture and information governance work. The current version was applied at a large UK charity through 2026. Delivered by RAISE.AI (Gembitz Ltd, est. 2017). Book an intro call or write to ossama@raiseai.co.