Compliance — GDPR & Regulation (EU) 2024/1689
Describe your processing activity, declare your AI system: the tool returns the risk category, the rule applied and the article relied upon, then builds the applicable GDPR + AI Act questionnaire and a ranked action plan. Free, no account.
Your data never leaves your browser.
There is no server behind this tool. The classification engine, the gap scoring and the Excel file are built inside the page, on your own machine. Nothing is sent, nothing is stored, no tracking cookie is added. Disconnect from the network after the page loads: the tool keeps working.
The assessment covers a processing activity, not a piece of software. These answers determine which control points apply and how gaps are weighted.
Each characteristic adds mandatory control points or increases the severity of gaps.
The classification comes from a versioned, readable rule base, in the order imposed by the regulation itself. No language model is involved: the same declaration always yields the same result. The tool shows the rule applied, the article and the trace of triggered rules — the part you copy into your file.
The derogation that lifts an Annex III system out of the high-risk regime never applies where the system profiles natural persons. This is the most common classification mistake: the tool applies the exception and says so, rather than returning a milder category.
Every gap is weighted by the severity of the control point, then increased by context: special category data, large scale, vulnerable people, AI Act category. The score gives a P1, P2 or P3 priority, and the priority gives a target date. An action plan, not a list of complaints.
This tool does not replace the legal texts: it points you back to them. Every control point cites its article.
The same engine exists as a service and an API: classification and gap scoring callable from your own tools, deliverable exports, versioned reference sets, deployment on your own infrastructure. That is what lets you handle a portfolio of processing activities rather than one, and replay a classification when the reference set changes. Get in touch to discuss it.
Unsure about a classification?