Governance
AI Governance Care
Monthly AI governance support: up to 3 new AI use cases or vendors reviewed, your AI register kept current and a quarterly…
Governance
EU AI Act Readiness Assessment
A clear picture of where your AI tools sit under the EU AI Act, with gaps listed and a dated plan.
Most businesses now use AI somewhere, often without a list of where. The EU AI Act asks you to know. EU AI Act Readiness Assessment reviews up to eight AI systems or use cases. Each one is classified, your role as provider or deployer is confirmed and the relevant articles are cited. You get a gap report and a 90-day action plan. It helps you prepare; it is not legal advice.
- Up to eight AI systems classified, with articles cited
- Your provider or deployer role and obligations per system
- Gap report and 90-day plan; helps you prepare, not legal advice
$6,475
10–20 working days
What it is
EU AI Act Readiness Assessment is a fixed-scope review of the AI tools and features your business uses or sells. We build an AI system register and classify each system. We confirm your role, map obligations and dates, check transparency and AI literacy, and deliver a gap report and action plan.
Why businesses buy it
The EU AI Act applies in stages, and its duties depend on what each system does and your role in it. A business using a chatbot, a hiring tool and a writing assistant can face very different duties for each. Working this out from the official text takes time most small teams do not have. This assessment does the groundwork for you. Each classification cites the article it rests on, and borderline cases are flagged for your lawyer. You finish with a register, a gap report and a dated plan. It helps you prepare, but it is not legal advice or certification.
Problems this solves
Nobody has a list of the AI tools the business uses
A written inventory questionnaire, answered by your decision-maker and technical owner, builds an AI system register. It covers up to eight systems or use cases, including third-party tools.
You cannot tell which AI Act duties apply to you
Each system is classified against the prohibited, high-risk and transparency rules. Your provider or deployer role, obligations and dates are listed, with the article cited.
You do not know what evidence is missing
A gap report lists evidence present and missing, including Article 50 transparency and Article 4 AI literacy checks per team. It helps you prepare; it is not legal advice.
Preparation stalls because there is no clear next step
A 90-day prioritized action plan puts the work in order. A written findings report explains it, and borderline cases are flagged for your lawyer.
A good fit if
You are an EU business, or a US business with EU customers, that uses or sells AI.
You have no compliance team and are unsure which AI Act duties apply to you.
You use several AI tools, such as chatbots, writing assistants or screening tools, without a register of them.
You want a written plan your team and your lawyer can work from.
Not the right fit if
You need staff set up on a shared AI workspace with a written usage guide rather than a systems review. See Team AI Assistant Rollout.
You want ongoing monthly governance support after the review. See AI Governance Care.
You need an AI usage policy written and rolled out. See AI Usage Policy System.
You need a legal opinion, conformity assessment or certification. Speak to a qualified lawyer or notified body.
How it works
- You send a list of the AI tools, features and vendors you use, with contracts or product pages for third-party tools.
- Your decision-maker and technical owner answer a written inventory questionnaire, and we build the AI system register from it.
- We classify each system against the Act's prohibited, high-risk and transparency rules, citing the articles.
- We confirm whether you are a provider or deployer for each one and map obligations and dates.
- We check Article 50 transparency and Article 4 AI literacy, then list evidence present and missing in a gap report.
- A written findings report explains the gap report and the 90-day prioritized action plan.
What you provide within 72 hours
Your portal lists these the moment you order. Delivery starts the working day after everything is in and your access is checked.
- A list of the AI tools, features and vendors your business uses or sells.
- Vendor contracts or product pages for each third-party AI tool.
- One decision-maker and one technical owner to answer the questionnaire.
- Questionnaire answers within 5–15 working days of ordering, so the review can start on time.
The 72-hour rule. Send everything on your checklist, including access, within 72 hours of ordering so your build starts on time.
Timeline
Start
Order placed. Tool list and vendor documents due within 72 hours, questionnaire answers within 5–15 working days.
Inventory questionnaire
Written questionnaire to build the AI system register.
Classification
Each system classified against the current official text, with articles cited.
Roles and obligations
Provider or deployer role, obligations and dates mapped per system.
Gap report
Transparency and AI literacy checks completed, gaps and action plan drafted.
Findings report
Written findings that explain the report and plan.
| Option | Delivery time | Price |
|---|---|---|
| Standard | 10–20 working days | $6,475 |
What you receive at handover
- A written inventory questionnaire and an AI system register with up to eight systems
- Risk classification, role, obligations and dates per system, with articles cited (helps you prepare; not legal advice)
- Article 50 transparency and Article 4 AI literacy checks per team
- A gap report and a 90-day prioritized action plan (recommendations; fixes are not included)
- A written findings report and a follow-up period for email questions
Expected benefits and how to measure them
- Helps you understand which AI Act duties may apply to each tool
- Can make conversations with your lawyer shorter and more focused
- Gives your team a dated plan to work through
- AI systems on the register
- Count systems in the register at delivery and again each quarter as tools are added or retired.
- Gaps closed
- Track how many gap report items are marked done at the end of each month of the action plan.
- Staff with AI literacy evidence
- Compare the share of teams with training records at the Article 4 check against the same check later.
Before you start: Before answering the questionnaire, write down every AI tool you know your teams use. Note any AI training or policies already in place.
These are things to track, not promised results. Outcomes depend on your data, your team and your market.
Running costs
There are no running costs. The assessment is paid once, and the register, report and plan are yours to keep. Closing the gaps it finds may involve other costs, such as legal review or new tools. The action plan lists those steps so you can budget for them.
Ask about running costsCustom requirements
Add a note at checkout if you need something specific. If it fits within the Scope Card it is simply included. If it goes beyond it, you get a written Change Quote within two working days, and that work starts only once you accept it, with its time added to your delivery date.
Request a custom versionKeep it running
There is nothing to keep running after the assessment. The register, gap report and action plan are yours, and follow-up questions by email are answered during the support period. The Act and its guidance keep changing, so plan to review the register as your tools change. AI Governance Care can keep it current each month.
How this compares
| Do it yourself | Hire a traditional agency | Upmark Labs | |
|---|---|---|---|
| Approach | Reading the Act and guidance yourself | A law firm or consultancy billing by the hour | Ours classifies up to eight systems with the articles cited |
| Output | Notes and checklists from the internet | A report or opinion, priced to scope | Ours delivers a register, gap report and 90-day action plan |
| Legal position | No review at all | A legal opinion if you hire a lawyer | Ours helps you prepare and flags borderline cases for your lawyer; not legal advice |
| Cost | Many hours of your own time | Hourly or day rates | Ours is one fixed price, shown before you buy |
Questions about this product
Is the EU AI Act Readiness Assessment legal advice?
No. It helps you prepare, but it is not legal advice or a legal opinion. Each classification is checked against the current official text of the Act at delivery and cites the article it rests on. Borderline cases are flagged so your lawyer can review them. Many clients share the report with their lawyer to save time.
Does the EU AI Act apply to US businesses?
It can. The Act can apply outside the EU when a business places AI systems on the EU market. It can also apply when outputs are used in the EU. A US business with EU customers or EU staff should check. The assessment looks at your situation, and your lawyer can confirm the position.
What is the difference between a provider and a deployer under the AI Act?
Broadly, a provider develops an AI system or has it developed and puts it on the market under its own name. A deployer uses an AI system in its own work. Most small businesses are deployers of tools like chatbots or writing assistants, but some are providers too. Duties differ, so the assessment confirms your role for each system.
Will the assessment certify us or make us compliant?
No. It does not certify you, and no review alone makes a business compliant. Conformity assessment, CE marking, notified-body work and ISO/IEC 42001 certification are all outside the scope. The assessment shows where you stand, what evidence is missing and what to do next, in a dated plan.
What do the Article 50 and Article 4 checks look at?
Article 50 covers transparency, such as telling people when they are talking to an AI or seeing AI-generated content. Article 4 covers AI literacy, meaning staff who use AI should understand it well enough. We check both for each team and list the evidence you have and what is missing.
What if we use more than eight AI systems?
Choose the eight that matter most, usually those touching customers, staff decisions or personal data. If you need more covered, add a note at checkout and we send a written Change Quote. A second questionnaire round for another business unit, or a translated report, can also be quoted the same way.
Does the assessment cover US state AI laws?
Only briefly. The focus is the EU AI Act. We can add a short note on one US state AI law you name, such as one on AI in hiring. Other non-EU laws are not covered. For a full review of US obligations, speak to a lawyer in that state.
Who fixes the gaps the assessment finds?
That is your choice. Fixing gaps is not part of the assessment, which gives recommendations only. Your team can work from the action plan, or we can help through other services. Team AI Assistant Rollout gives staff a shared workspace and written usage guide, and AI Governance Care keeps your register and reviews current each month.
Know where your AI stands under the Act
Order the EU AI Act Readiness Assessment for a classified register of your AI systems, a gap report and a dated plan. It helps you prepare; it is not legal advice.
Works well with
