AI Governance Ready today

Get audit-ready for EU AI Act

EU AI Act (Regulation (EU) 2024/1689) · Artificial Intelligence Act

The European Union's risk-based regulation for AI systems, covering prohibited practices, risk classification, obligations for high-risk systems, and transparency requirements for AI interacting with or generating content for natural persons.

25 controlsReady today full control library
EU AI Act badgeEU AI Act

What is EU AI Act?

The European Union's risk-based regulation for AI systems, covering prohibited practices, risk classification, obligations for high-risk systems, and transparency requirements for AI interacting with or generating content for natural persons.

Who it applies to

Providers, deployers, importers and distributors of AI systems placed on the EU market or whose output is used in the EU, wherever they are based. Obligations depend on the risk tier of the system.

How the standard is organised

A risk-based regulation: a short list of prohibited practices, detailed duties for high-risk systems (risk management, data governance, technical documentation, logging, transparency, human oversight, accuracy and robustness), transparency duties for systems that interact with people or generate content, and separate obligations for general-purpose AI models.

Framework names, marks and abbreviations (ISO, SOC 2, PCI DSS, TISAX, HIPAA, GDPR and others) are trademarks of their respective standards bodies and are used here only to describe what the Bitkosh Readiness Platform helps you track and prepare for. The badges shown are original Bitkosh artwork, not the official marks. Bitkosh Technologies is not affiliated with, sponsored by, or endorsed by ISO, AICPA, the PCI Security Standards Council, ENX/VDA, or any other framework owner, and using this platform does not by itself confer or guarantee certification — certification/attestation is granted only by the relevant accredited third-party body.

EU AI Act on the Bitkosh platform

The 25 EU AI Act controls sit in one workspace with gap assessment, evidence collection and your readiness score, and shared controls count towards the equivalent requirement in the other 47 ready frameworks at the same time — so a second framework costs a fraction of the first.

How the platform works

Sample controls

Six controls from the platform's control library, chosen because they are the most specific to this framework.

  • ART-50.4Label deep fakes and AI-generated public-interest text

    Disclose deep-fake image/audio/video content as artificially generated/manipulated; disclose AI-generated text published on matters of public interest unless it underwent human editorial review with…

    Transparency
  • ART-14.4Equip overseers with effective intervention capability

    Ensure individuals assigned to oversight understand system capabilities/limitations, remain aware of automation bias, correctly interpret output, can decide not to use or can override output, and can…

    Human Oversight
  • ART-50.3Disclose emotion recognition / biometric categorisation use

    Inform natural persons exposed to an emotion recognition or biometric categorisation system of its operation, and process any personal data per data protection law. Effective 2 Aug 2026 per Commission…

    Transparency
  • ART-9.2Identify and analyse known/foreseeable risks

    Identify and analyse known and reasonably foreseeable risks to health, safety, or fundamental rights, considering both intended use and reasonably foreseeable misuse.

    Risk Management
  • ART-10.5Govern bias detection and correction safeguards

    Where special-category personal data is processed strictly for bias detection/correction, apply and document appropriate safeguards.

    Data Governance
  • ART-11.2Cover Annex IV documentation content

    Ensure technical documentation covers: general description, development process detail, monitoring/functioning/control, risk management system, lifecycle changes, standards applied, and the EU…

    Technical Documentation
Check your readiness for this framework, free

Frequently Asked Questions

Who publishes EU AI Act, and who does it apply to?
EU AI Act is published by the European Parliament and the Council of the EU, as Regulation (EU) 2024/1689. Providers, deployers, importers and distributors of AI systems placed on the EU market or whose output is used in the EU, wherever they are based. Obligations depend on the risk tier of the system.
How is EU AI Act conformance demonstrated?
Enforced by a regulator - demonstrated, not certified. There is no certificate to obtain. Conformance is shown through mapped controls and retained evidence, and tested by a regulator or a counterparty rather than an auditor you appoint.
How is EU AI Act structured?
A risk-based regulation: a short list of prohibited practices, detailed duties for high-risk systems (risk management, data governance, technical documentation, logging, transparency, human oversight, accuracy and robustness), transparency duties for systems that interact with people or generate content, and separate obligations for general-purpose AI models. Bitkosh tracks 25 EU AI Act controls against it, each with its own evidence requirements, owner and review cadence.
Let's build together

Ready to get audit-ready for EU AI Act?

See how the Bitkosh Readiness Platform gets you audit-ready for EU AI Act — and the other 47 ready frameworks — from a single control library.

Which framework do you need?

Free, no sign-up. Pick a framework to answer its controls, or start with the quick scan. Answers stay in your browser.

Readiness self-check only. It is not an audit or a certification.