EU AI Act Risk Classifier
Classify an AI system into minimal/limited/high/unacceptable risk using a simplified questionnaire.
Last reviewed by the Radiatus Cloud team
Output
Going for ISO 27001, SOC 2, HIPAA or GDPR?
Radiatus runs end-to-end compliance & GRC programs.
Classify an AI system’s risk level
The EU AI Act regulates AI by risk level, and knowing where a system falls determines its obligations. This tool classifies an AI system into minimal, limited, high or unacceptable risk using a simplified assessment.
Why the risk tier drives everything
The EU AI Act takes a risk-based approach, imposing obligations in proportion to the risk an AI system poses: unacceptable-risk systems are banned, high-risk ones face strict requirements, limited-risk ones need transparency, and minimal-risk ones are largely unregulated. So the single most consequential question about an AI system under the Act is which tier it falls into, because that determines whether it is permitted and what you must do. A simplified classification helps you understand the likely tier and therefore the likely obligations, which is the starting point for compliance, though the definitive classification depends on specifics.
A tool, not legal advice
This is a practical aid, not legal advice, and regulations change and vary by circumstance. Confirm your obligations with a qualified professional before relying on any assessment or generated document. It runs entirely in your browser, so nothing you enter is uploaded, which matters when the input describes your compliance posture.
Related tools
- SOC 2 Evidence Readiness — Interactive checklist to gauge your SOC 2 evidence readiness.
- Privacy Policy Checker — Check if your policy covers standard requirements (GDPR/CCPA basics).
- Compliance Req Finder — Find which standards (ISO, SOC2, HIPAA) apply to your industry/region.
- Audit Readiness Planner — Plan your compliance audit timeline (SOC2, ISO) backwards from deadline.
Frequently Asked Questions
What are the EU AI Act risk tiers?
Minimal, limited, high and unacceptable. Unacceptable-risk systems are banned, high-risk face strict requirements, limited-risk need transparency, and minimal-risk are largely unregulated.
Why does the tier matter so much?
Because the Act imposes obligations in proportion to risk, so the tier determines whether a system is permitted at all and what you must do to comply.
What makes a system high-risk?
Use in sensitive areas the Act specifies, such as certain employment, credit or safety contexts. The classifier indicates the likely tier from your description.
Is this classification definitive?
No. It is a simplified assessment for understanding the likely tier and obligations. The definitive classification depends on specifics and should be confirmed professionally.
Is my input uploaded?
No. The classifier runs entirely in your browser.
Privacy & Security
Generated locally in your browser. This is not legal advice.
How to Use
Answer questions to get a simplified EU AI Act risk category.
Disclaimer: This tool is provided "as is" without warranty of any kind. Results are for educational and utility purposes.
Related Tools
SOC 2 Evidence Readiness
ComplianceInteractive checklist to gauge your SOC 2 evidence readiness.
Privacy Policy Checker
ComplianceCheck if your policy covers standard requirements (GDPR/CCPA basics).
Compliance Req Finder
ComplianceFind which standards (ISO, SOC2, HIPAA) apply to your industry/region.