Interactive Compliance Tool

EU AI Act & Security Compliance Classifier

Evaluate your AI tool or LLM deployment against the EU AI Act enforcement roadmap, GDPR Data Protection Impact Assessment (DPIA) triggers, and security controls.

Built by Haileslassie Desalegn · Updated for EU AI Act 2025–2027 Enforcement Rules

---

1. What is the primary use case of the AI system?

General Purpose AI / Coding Assistant / Chatbot (e.g. Copilot, ChatGPT, Claude, RAG search) HR & Recruitment / Employee Evaluation (e.g. CV screening, performance ranking) Credit Scoring & Risk Assessment (e.g. loan approval, creditworthiness ranking) Biometric Identification / Emotion Recognition (e.g. facial recognition, CCTV analytics) Critical Infrastructure & Security Components (e.g. power grid, safety-critical OT)

2. How is the AI model hosted and deployed?

Commercial Cloud SaaS / Managed API (e.g. OpenAI API, Anthropic API, Copilot) Self-Hosted Open Weights (e.g. Llama 3, Mistral, DeepSeek on your infrastructure) Custom Fine-Tuned Model (Internal weights trained on proprietary enterprise data)

3. What type of data is submitted into the AI system?

Proprietary Code / Internal Non-PII Data Personal Identifiable Information (GDPR PII) (e.g. customer names, emails, user logs) Financial Data / Cardholder Information (PCI DSS / Financial PII)

4. Are users or affected individuals located in the European Union?

Yes — Deployment or outputs impact EU residents (EU AI Act applies extra-territorially) No — Exclusively non-EU deployment and data processing