EU AI Act — high-risk obligations apply from 2 August 2026. Penalties reach €35M or 7% of global turnover.

EU AI Act & DORA readiness — for SMEs

Is your AI illegal?
Find out in 60 seconds.

The EU AI Act and DORA compliance scanner for SMEs — know your gaps before regulators do. Most companies already run AI they can't account for: ChatGPT in sales, a model in the product, a tool in HR. From 2 August 2026, that's a regulated activity carrying fines up to €35M or 7% of global turnover.

  • Maps to Reg. (EU) 2024/1689 & 2022/2554
  • Free scan & score — pay only for the fix plan
  • No signup to see your result
Built for the teams the Act hits first HR & recruiting tech Fintech & credit scoring Medtech & health AI Biometrics & ID verification
Free AI compliance scan Question 1 of 5
How it works

Sixty seconds to know exactly where you stand

No consultants, no 40-page questionnaire. Answer five questions and get a picture most SMEs pay four figures for.

  1. 1

    Map your AI

    Tell us which tools you use, where AI touches decisions, and who your customers are. We map it against the Act's risk tiers and DORA's obligations.

  2. 2

    Get your score

    An instant readiness score (0–100), a risk classification, and a plain-English list of every gap — each tied to the article that creates the obligation.

  3. 3

    Close the gaps

    Unlock the full fix plan: a prioritised roadmap with owners, deadlines, and ready-to-use document templates for each gap.

Inside the fix plan

Not a score. A to-do list a regulator would respect.

The free scan shows you the gaps. The fix plan tells you exactly what to do about each one.

  • Gap-by-gap remediation steps, ranked by regulatory risk
  • The specific EU AI Act / DORA article behind every obligation
  • Editable templates: AI policy, system inventory, risk assessment, DPIA add-on
  • A one-page board summary you can hand to leadership
  • Owner & deadline suggestions so nothing sits unassigned
Why now

The deadlines are already here

The EU AI Act didn't wait, and it applies to companies outside the EU whose AI output is used inside it.

Feb 2025 In force

Bans on prohibited AI practices, plus AI literacy duties (Art. 4), already apply.

Jan 2025 In force

DORA applies to financial entities and their ICT providers — resilience & third-party risk.

Aug 2025 In force

Obligations for general-purpose AI models take effect.

2 Aug 2026 Imminent

High-risk AI system obligations apply — governance, documentation, human oversight, logging.

Sources: Regulation (EU) 2024/1689 (AI Act) and Regulation (EU) 2022/2554 (DORA). Dates reflect the Acts' staged application.

Pricing

The scan is free. The plan pays for itself.

One consultant day on AI Act readiness runs €1,200–€2,500. Start with the gaps for a fraction of that.

Free scan
€0

See exactly where you stand.

  • Readiness score & risk class
  • Your top compliance gaps
  • Article references for each gap
  • Runs entirely in your browser
Start the scan
Founding rate Fix plan
€299one-time · founding rate

Everything you need to close the gaps. Built for you by hand, delivered in 48 hours.

  • Full remediation roadmap, prioritised
  • Owners, deadlines & effort estimates
  • Editable policy & documentation templates
  • One-page board summary
  • 14-day money-back guarantee
Guided
€1,900

We build it with you.

  • Everything in Fix plan
  • Two working sessions with a specialist
  • Documents completed for you
  • Sign-off pack for leadership
Questions

Straight answers

Does the EU AI Act really apply to a small company?

Yes. The Act applies by role and risk, not headcount — if you deploy or provide AI systems, you have obligations. SMEs get some proportionality, but "we're small" is not an exemption. It also reaches non-EU companies whose AI output is used in the EU.

Is this legal advice?

No. AI Risk Evaluator gives an indicative readiness assessment to help you prioritise. It's built on the text of the regulations, but it isn't legal advice and doesn't create a lawyer–client relationship. For formal sign-off, use it to brief your counsel far more cheaply.

What happens to my answers?

The scan runs entirely in your browser — your answers are used to compute your score locally and are not transmitted while you scan. You only share contact details if you choose to request the fix plan.

How is the score calculated?

We map your AI tools, use cases, customer base, and existing documentation against the obligation tiers in the AI Act (prohibited, high-risk, transparency, GPAI) and DORA's ICT-risk duties, then weight each gap by regulatory severity.

What do I get for €299?

A complete, prioritised remediation plan for the gaps in your scan, the article behind each one, editable templates for the documents you're missing, and a board-ready summary. If it isn't useful, the 14-day guarantee refunds you.

Find your gaps before an auditor does.

Sixty seconds now beats a €35M question later.

Run my free scan →