Checks, EU AI Act, Early access
EU AI Act readiness from the documents that describe how you use AI.
nerix reads your documents and records against the duties of the EU AI Act: which systems you use, their risk class, transparency, human oversight, data quality and record keeping. It also tells you whether the Act applies to you and why. Early access.
The free plan is one seat and 3,000 credits a month, never charged.
01What nerix checks
Forty-five duties, from the register of AI systems to incident reporting.
The library holds Regulation (EU) 2024/1689 as 45 requirements, in full with a link to the official text. They include a register of AI systems in use, risk classification, your role for each system, prohibited practices, AI literacy of staff, supplier checks before buying AI, human oversight, logging, transparency to people affected, disclosure when people talk to AI and marking of AI content.
The high-risk duties are there too, such as the risk management system, data quality, technical documentation, conformity assessment, the EU declaration and registration, monitoring and serious incident reporting. nerix looks in your documents for each duty. A document that only mentions it counts as Partly found, and a person confirms every result.
- Know your AIRegister of AI systems in use, risk classification, your role per system, supplier checks before buying AI.
- For every userProhibited practices, AI literacy of staff, disclosure when people talk to AI, informing people affected.
- High-risk systemsRisk management, data quality and bias, technical documentation, logging, human oversight, accuracy and cybersecurity.
- Before and after useConformity assessment, declaration and registration, monitoring, corrective action and serious incident reporting.
02Does it apply to you
Using AI is not enough to be high risk, and nerix tells them apart.
nerix has two rules. The first covers every provider or deployer of an AI system with a link to the EU. The second, high risk, needs an AI system used for a purpose in Annex III, such as employment, education or essential services, or as a safety component. Using AI at all is not enough for the second.
The rule notes the dates already running: prohibited practices and AI literacy from 2 February 2025, the duties for general-purpose models from 2 August 2025 and the transparency duties of Article 50 from 2 August 2026. When nerix lacks a fact, such as whether you use or provide AI, it asks instead of assuming.
- ScopeYou provide or use an AI system, with a link to the EU.
- High riskAn Annex III use or a safety component, and you are asked when your facts do not settle it.
- DatesThe dates the duties start to run are kept in the rule.
03Where it stops
It reads your paperwork. It does not classify your AI for you.
nerix does not inspect your AI systems, test them for bias or decide your risk class. It checks whether you have written down what the Act asks you to write down, and whether the records exist. The risk class and conformity decisions stay with you and your advisers. Its rules for who is covered were written from the Regulation with their citations and carry no recorded human review yet.
There is no dedicated set-up pack for the AI Act. Following it in Certifications adds a general law plan, with a yearly review of the laws that apply and a yearly risk review. The check itself is the AI Act readiness plan. Readiness information, not an audit or legal advice.
Readiness information, not an audit, a certificate or legal advice.
04Questions
Questions
Does the EU AI Act apply to my business?
If you provide or use an AI system with a link to the EU, yes for the general duties such as AI literacy. Whether your use is high risk is a separate test. nerix applies both and asks when it lacks a fact.
Does nerix classify our AI systems by risk?
No. It checks whether you have a risk classification written down for each system and the records around it. The classification is your decision.
Does the check cover general-purpose models?
Yes, there is a requirement for contractual assurance for general-purpose AI models, and the rule keeps the date those duties started.
Has a lawyer reviewed the rules?
No. The scope rules were written from the Regulation with their citations and carry no recorded human review yet. Treat the result as readiness information.
Can nerix keep our register of AI systems?
The check looks for a register of AI systems in use as a document you hold. nerix does not keep that register for you yet.
Is it finished?
It is early access. The readiness check, plan, issues and business reviews work today. Tell us what you are missing.
Need something this does not do? We build it into your workspace. Built for you
- GDPR data protectionCheck your documents against 38 GDPR duties, from the processing register to breach notification, and find out whether the rules apply to your business.
- ISO 27001 information securityCheck your documents against the ISO 27001 clauses and all 93 Annex A controls, build the statement of applicability from the result, and invite your auditor.
- NIS2 cyber securityCheck your documents against 35 NIS2 duties, from board oversight to the 24 hour warning and 72 hour report, and see whether NIS2 applies to your business.
- ISO 9001 quality managementSee which ISO 9001 clauses your documents and records already show, run the internal audits and management review it asks for, and turn gaps into tasks.
- Checks, the whole productThe plan, internal checks, issues and business reviews that every readiness check sits beside.
- TemplatesFree policy, register and checklist templates you can fill in and download.