EU AI Act · Enforcement from August 2026

Are you actually meeting the rules — or just guessing?

Most EU AI Act tools tell you which rules might apply. Conformis tells you whether you're meeting them — a defensible gap assessment for companies that deploy AI, not a checklist.

Check your exposure free See audit options

Built for deployers of AI systems · Conservative, audit-grade analysis · Not legal advice

The problem

A free checker tells you you're in scope. Then what?

Knowing the August 2026 deadline exists doesn't make you compliant. The hard part is the specific question a regulator, customer, or procurement team will actually ask: show me you meet the obligations that apply to you. That gap — between awareness and defensible evidence — is what Conformis closes.

01

Scope, tested

We don't take your own risk guess at face value. We pressure-test whether your AI is really high-risk, limited, or out of scope.

02

Gaps, not generalities

A written assessment mapping your actual situation to specific Articles — what you're missing and what to do about it.

03

Right-sized

If your exposure is small, we say so. We don't inflate scope to sell you a bigger engagement. Credibility is the product.

Why we're different

Conformis vs. a compliance checklist

Checklists answer "which rules apply." That's the easy 10%.

✕Free checkers: tell you the AI Act might apply to you — then leave you to figure out compliance alone.
✓Conformis: examines what you actually do and tells you where you're non-compliant, by Article, with remediation.
✓Conformis: separates legal obligations from good practice so your lawyer can rely on it.
✓Conformis: conservative by default — we'd rather tell you you're fine than manufacture findings.
Engagements

Straightforward, fixed-fee

Start with an audit. Move to monitoring if it's useful. No lock-in, no per-seat pricing.

Gap Audit — Basic

€1,500
  • Scope & role determination
  • Risk classification, tested
  • Gap assessment vs. applicable Articles
  • Prioritised action list
Start with a free check

Gap Audit — Full

€2,500
  • Everything in Basic
  • Up to 5 AI systems / use cases
  • FRIA & DPIA-overlap analysis
  • Written remediation roadmap
  • Review call
Start with a free check

Ongoing Monitoring

€500/mo
  • Quarterly re-assessment
  • Regulatory change alerts
  • New-system reviews
  • Audit-ready evidence file
Start with a free check
Free · No email needed to see your result

Where do you stand?

Six quick questions. You'll get an indicative read on your EU AI Act exposure immediately, on this page.

EU AI Act exposure check

Indicative only — a paid audit confirms it. ~2 minutes.

Does your organisation build AI systems, or use ones built by others?

This determines which set of obligations applies.

We use AI built by others e.g. a vendor tool, an API like GPT or Claude
We build or substantially modify AI and put it on the market under our name
Both
Unsure

Is the AI used by people in the EU, or do its outputs affect people in the EU?

The Act applies even to non-EU companies if outputs reach the EU.

Yes
No
Unsure

Does any system do any of these?

Social scoring · inferring emotions at work or school · biometric categorisation of sensitive traits · untargeted face scraping · subliminal manipulation.

Yes, at least one might apply
No, none of these
Unsure

Does the AI operate in any of these areas?

Employment/hiring · credit scoring · insurance pricing · education · essential services · biometrics · critical infrastructure · law enforcement · justice.

Yes, at least one
No, none of these
Unsure

What does the AI's output do?

Be honest about whether a person or the machine effectively decides.

Makes or effectively determines a decision about a person approve/reject, rank, score
Recommends; a human always decides
Assistive only — no decisions about people summarise, draft, search, classify documents
Unsure

Do staff who use the AI have any formal AI-literacy training?

Article 4 — in force since February 2025, applies broadly.

Yes, structured
No / ad hoc
Unsure

    This is an automated, indicative indication based on six answers — not a compliance determination and not legal advice. Real classification depends on specifics a short audit examines properly.

    Thanks — we'll review your answers and be in touch within two business days with a scoped next step. If anything urgent (e.g. a flagged prohibited practice) we'll prioritise it.