Is your AI illegal?
Find out in 60 seconds.
The EU AI Act and DORA compliance scanner for SMEs — know your gaps before regulators do. Prohibited AI uses are already banned (fines up to €35M or 7% of global turnover), the staff AI-literacy duty has applied since February 2025, and high-risk obligations land in December 2027. Most companies still can't account for the AI in their sales, product and HR.
- Maps to Reg. (EU) 2024/1689 & 2022/2554
- Free scan & score — pay only for the fix plan
- No signup to see your result
Building your AI inventory…
Sixty seconds to know exactly where you stand
No consultants, no 40-page questionnaire. Answer five questions and get a picture most SMEs pay four figures for.
-
1
Map your AI
Tell us which tools you use, where AI touches decisions, and who your customers are. We map it against the Act's risk tiers and DORA's obligations.
-
2
Get your score
An instant readiness score (0–100), a risk classification, and a plain-English list of every gap — each tied to the article that creates the obligation.
-
3
Close the gaps
Unlock the full fix plan: a prioritised roadmap with owners, deadlines, and ready-to-use document templates for each gap.
Not a score. A to-do list a regulator would respect.
The free scan shows you the gaps. The fix plan tells you exactly what to do about each one.
- Gap-by-gap remediation steps, ranked by regulatory risk
- The specific EU AI Act / DORA article behind every obligation
- Editable templates: AI policy, system inventory, risk assessment, DPIA add-on
- A one-page board summary you can hand to leadership
- Owner & deadline suggestions so nothing sits unassigned
Some rules already bind you
Prohibited-practice bans and AI-literacy duties are already in force; high-risk obligations are coming. The Act also reaches companies outside the EU whose AI output is used inside it.
Bans on prohibited AI practices, plus AI literacy duties (Art. 4), already apply.
DORA applies to financial entities and their ICT providers — resilience & third-party risk.
Obligations for general-purpose AI models take effect.
High-risk AI system obligations apply — governance, documentation, human oversight, logging. Delayed from Aug 2026 by the 2026 Digital Omnibus; product-embedded systems follow Aug 2028.
Sources: Regulation (EU) 2024/1689 (AI Act) & 2022/2554 (DORA). High-risk dates reflect the 2026 Digital Omnibus agreement (formal adoption pending). Fine ceilings: €35M/7% for prohibited practices (Art. 5); €15M/3% for other breaches (Art. 99).
The scan is free. The plan pays for itself.
One consultant day on AI Act readiness runs €1,200–€2,500. Start with the gaps for a fraction of that.
See exactly where you stand.
- Readiness score & risk class
- Your top compliance gaps
- Article references for each gap
- Runs entirely in your browser
Everything you need to close the gaps. Built for you by hand, delivered in 48 hours.
- Full remediation roadmap, prioritised
- Owners, deadlines & effort estimates
- Editable policy & documentation templates
- One-page board summary
- 14-day money-back guarantee
We build it with you.
- Everything in Fix plan
- Two working sessions with a specialist
- Documents completed for you
- Sign-off pack for leadership
Straight answers
Does the EU AI Act really apply to a small company?
Yes. The Act applies by role and risk, not headcount — if you deploy or provide AI systems, you have obligations. SMEs get some proportionality, but "we're small" is not an exemption. It also reaches non-EU companies whose AI output is used in the EU.
Is this legal advice?
No. AI Risk Evaluator gives an indicative readiness assessment to help you prioritise. It's built on the text of the regulations, but it isn't legal advice and doesn't create a lawyer–client relationship. For formal sign-off, use it to brief your counsel far more cheaply.
What happens to my answers?
The scan runs entirely in your browser — your answers are used to compute your score locally and are not transmitted while you scan. You only share contact details if you choose to request the fix plan.
How is the score calculated?
We map your AI tools, use cases, customer base, and existing documentation against the obligation tiers in the AI Act (prohibited, high-risk, transparency, GPAI) and DORA's ICT-risk duties, then weight each gap by regulatory severity.
What do I get for €299?
A complete, prioritised remediation plan for the gaps in your scan, the article behind each one, editable templates for the documents you're missing, and a board-ready summary. If it isn't useful, the 14-day guarantee refunds you.
Find your gaps before an auditor does.
Sixty seconds now beats a €35M question later.
Run my free scan →