EU AI Act Readiness Checklist for AI SaaS

Use this before audit or enterprise diligence

This is a readiness checklist for legal review and buyer questionnaires — not the general primary compliance checklist. Goal: walk in with facts, not vibes.

1. Inventory

• [ ] List AI features + intended purpose
• [ ] List models / vendors
• [ ] Note whether outputs affect people

2. Role & scope

• [ ] Provider / deployer / both (per feature)
• [ ] Company establishment country
• [ ] EU market placement or EU output use?

3. Near-term transparency

• [ ] Art. 50 disclosure draft (target 2 August 2026 where applicable)
• [ ] Privacy policy AI section

4. High-risk signals

• [ ] Annex III category candidates (HR, education, credit, etc.)
• [ ] Material influence? Profiling?
• [ ] Art. 6(3) facts captured

5. Oversight & logging

• [ ] Human oversight SOP draft
• [ ] Logging plan (legal if high-risk; recommended otherwise)

6. Evidence pack

• [ ] System card
• [ ] Vendor inventory
• [ ] Lawyer handoff questions

7. Timeline

• [ ] Art. 50: 2 August 2026
• [ ] Annex III standalone: 2 December 2027
• [ ] Annex I embedded: 2 August 2028

Turn the checklist into a brief

Complete the items you can, then get a free readiness brief for your product.

Deeper pages: 10-step checklist · templates · topic checklists.

Not legal advice.