Checklist
EU AI Act readiness checklist
A working list for determining whether your organisation is in scope and reviewing high-risk system obligations step by step.
Resources
Material you can use while building your governance programme.
These are the working documents used when applying the AIZEC governance model. Request any of them and our team will send it directly.
Featured
Three documents used in the first 90 days
Working material for setup, the inventory campaign and the first triage cycle.
Guide
AI Center of Excellence setup guide
Standing up the hub-and-spoke model: role definitions, selecting spoke representatives, the first inventory campaign and the communication plan.
Template
Autonomy tiering template
A decision tree and example use-case library for adapting the Green / Amber / Red tiers to your organisation.
All material
Guides and working documents
Playbook
Inventory campaign playbook
Communication templates and a weekly plan for running a voluntary inventory campaign with high participation.
Template
Use-case intake form template
Field definitions for adapting the one-page, jargon-free intake form to your organisation.
Guide
Red-tier risk assessment guide
Test coverage, rollback planning and legal approval checkpoints for agents that write to production systems.
Guide
ISO/IEC 42001 evidence map
Mapping standard clauses to platform records, with an audit preparation checklist.
Worksheet
Governance maturity assessment
A short assessment to locate your organisation on the five-level maturity model.
Technical document
Gateway log integration schema
Field definitions, authentication model and sample payloads for the service-to-service log ingestion endpoint.
Glossary
AI governance terms
Short definitions to establish a shared vocabulary in internal discussions.
| Term | Definition |
|---|---|
| Shadow AI | AI tools and automations used without the organisation's knowledge or approval. |
| Hub-and-spoke | An operating model where a central centre of excellence sets the standard and representatives in business units apply it. |
| Autonomy tier | The degree to which an AI use-case acts independently; classified in AIZEC as Green, Amber or Red. |
| Deployer | Under the EU AI Act, the party using an AI system under its own authority. |
| GPAI | General-purpose AI model; a foundation model usable across a wide range of tasks. |
| DLP | Data loss prevention; controls that detect and block sensitive data leaving the organisation. |
| Kill switch | A mechanism to immediately disable an approved AI agent, with a recorded rationale. |
| AIMS | The artificial intelligence management system defined under ISO/IEC 42001. |
Not sure which material you need?
In a short call we can identify the stage of your programme and send the relevant documents.