Catalogue / AI Act

EU Artificial Intelligence Act

Reg (EU) 2024/1689

The AI Act regulates AI by risk: it bans a few practices outright, places strict obligations on high-risk systems, sets transparency rules for the rest, and adds duties for general-purpose AI models — across the whole value chain.

In practice that starts with classifying each AI system — prohibited, high-risk, limited or minimal — because everything else follows from that. High-risk systems need a technical file, risk and data governance, logging, human oversight and transparency; limited-risk systems need disclosure; and general-purpose AI models carry their own documentation and copyright duties.

Who must comply: Providers, deployers, importers and distributors of AI systems placed on the EU market — and providers of general-purpose AI (GPAI) models. Your duties depend on your role and the system’s risk tier — a deployer of a high-risk system carries real obligations too, not just the provider.

  • Classify each AI system by risk tier
  • High-risk technical file, data governance & logging
  • Meaningful human oversight + transparency to users
  • GPAI-model documentation & copyright duties
BEST VALUE
COMPLETE BUNDLE
All 6 AI Act templates
€189one-time€264SAVE €75
All 6 editable AI Act templates
START-HERE guide + inline “what to change” guidance in every file
The Currency Stamp — kept current as the rules move
30-day money-back guarantee
Buy now →
Pay once·30-day money-back·EU VAT handled
Just the essentials? Starter Kit — €89 ↓

Does this sound like your AI Act project?

Is my system high-risk?

Annex III, safety components and the exemptions make classification the decision everything else depends on.

The Annex IV technical file

High-risk systems need a substantial technical file across Articles 9–15 — a heavy lift to build from scratch.

Provider or deployer?

Obligations split across the value chain. Deployers carry duties too, and the line isn't always clear.

GPAI & transparency

General-purpose models carry documentation and copyright duties; user-facing AI needs transparency and labelling.

The shape of the regulation, in plain terms

Art. 5

Prohibited practices

A short list of banned uses — manipulative, exploitative, social-scoring and certain biometric practices.

Title III

High-risk systems

Risk management, data governance, technical documentation, logging, human oversight and accuracy — with a conformity assessment before market.

Art. 50

Transparency duties

Tell people when they're interacting with AI, and label synthetic or deepfake content.

GPAI

General-purpose AI models

Technical documentation, a copyright policy and a training-data summary — with added duties for models posing systemic risk.

Governance

Roles & oversight

Provider vs deployer duties, the EU AI Office and national authorities, registration and post-market monitoring.

6 professional tools

€59

AI-System Risk-Classification Workbook

A guided questionnaire that computes each system's tier — prohibited, high-risk, limited, minimal — with the Art. 6(3) exemption logic, stacked GPAI and transparency duties, obligation start-dates and a legal/professional review sign-off field.

EXCELView details
€59

High-Risk Technical-Documentation Pack

The Annex IV technical file, section by section, with a complete worked example system running through all nine sections and the Articles 9–15 evidence map.

WORDView details
€39

Human-Oversight & Logging Procedures

Human oversight (Art. 14), the deployer checklist (Art. 26), log specification (Art. 12, 19) and an incident decision record with the Art. 73 deadlines.

WORDView details
€49

GPAI Transparency & Copyright Templates

Annex XI and XII documentation tables, an adoptable copyright policy, the steps to the public training-content summary, and a data-source register for general-purpose AI models.

WORD + EXCELView details
€29

AI Transparency Notice & Labelling Kit

Article 50 made operational: who discloses and who marks, the exceptions, notices by channel, a marking record and an evidenced checklist — with the 2 Dec 2026 deadline for systems already on the market.

WORDView details
€29

Provider/Deployer Obligations Matrix

Who does what across the value chain — provider, deployer, importer, distributor — with applicability triage, status tracking and a readiness dashboard.

EXCELView details
How it's packaged · Risk-tier based — packaged by prohibited / high-risk / GPAI / transparency obligations.
Pricing

Buy the AI Act kit

SINGLE TOOLS
€29–59each
Best for
one specific gap — buy only what you need
Included
  • Any of the 6 tools individually
  • Mix and match as you go
Format
Editable Word / Excel
Updates
Re-buy when revised
Browse the tools
STARTER KITsave ~24%
€89one-time
Best for
getting started fast on the essentials
Included
  • The core starter templates
Format
Editable Word / Excel
Updates
Kept Current eligible
Buy now
COMPLETE TOOLKITsave ~28%
€189€264one-time
Best for
full coverage & consultants serving several clients
Included
  • All 6 AI Act templates
Format
Editable Word / Excel
Updates
Kept Current eligible
Buy now
VARVICO ADVISORY

Want a practitioner's eyes on it?

I build these kits and run security in EU-regulated fintech. A small amount of my time is available for fixed-price work — quoted by written proposal, invoiced directly, never through the store.

Secure Development ReviewFrom €3,000 fixed · Two calendar weeks, remote, at most six interviews
Fractional Security LeadFrom €1,500 / month · Monthly, hours-capped, business hours CET

Not legal advice, and no audit opinion or certificate. Fixed price, stated in the proposal before you commit.

One email with the offers and how an engagement runs. No sequence.

Questions, answered plainly

The classification workbook walks the Annex III use-cases and the safety-component test. Most enterprise software is limited or minimal risk, but the answer is product-specific.