The EU AI Act and the GDPR, in one workspace for companies using AI.
Privacyboard keeps your AI Act work next to your GDPR records: mark the activities that use AI, classify each use as prohibited, high risk, with transparency duties or minimal risk, see what applies and from when, and record your AI literacy measures. The same activities are screened for a DPIA, your AI vendors are listed with their data location, and your privacy policy says how you use AI.
Free to set up · No credit card · About 5 minutes
In short
- For
- Companies that use AI tools in their work, or build AI into what they sell
- You get
- AI Act classification, AI literacy record, DPIA screening and a privacy policy that covers AI
- Set up
- About 5 minutes from your website address; AI tools are recognised among your vendors
- Plan
- AI Act classification from Free; complete DPIAs and transfer assessments on Pro
When AI raises privacy questions
You add an AI tool
A chatbot, a meeting recorder or a writing assistant starts handling customer or employee data.
A customer asks how you use AI
Procurement wants to know which AI services see their data, where, and what people are told.
You build AI into your product
As a provider, you have more duties than a company that only uses AI tools.
The AI Act deadlines arrive
AI literacy and the bans apply since February 2025, transparency duties from August 2026, high-risk rules later.
Classify each use in three questions
Prohibited practices, high-risk uses and transparency duties. What your records point to is offered ticked, and the result comes with what applies and from when.
AI literacy you can show
Article 4 asks for no certificate, but you must show the measures you took: record each training, rule or session, for whom and when.
AI vendors and their transfers
AI services come with their data location. A transfer outside the EEA gets its transfer impact assessment prefilled on Pro, and Data Privacy Framework certifications are checked every day.
How it works
- 1
Start with your website
We read your public pages and recognise the tools you use, AI services included. You confirm what we found.
- 2
Mark and classify your AI uses
In each activity, say whether it uses AI made by others or AI you built, then answer three short sets of questions.
- 3
Record and publish
Record your AI literacy measures, finish the assessments that are needed and publish a privacy policy that covers AI.
What you get
EU AI Act classification
Each use of AI classified as prohibited practice, high risk, transparency duties or minimal risk, with the obligations that follow and the date they apply from.
Deployer or provider
Using an AI tool made by others and building AI into your product carry different duties; each activity says which one you are.
AI literacy (Article 4)
Record each training, usage rule or awareness session, for whom and when, so you can show the measures you took.
DPIA screening
Every activity is screened against the criteria for a DPIA; AI counts as an innovative technology. Complete the DPIA on Pro, prefilled from your register.
AI vendors and transfers
AI services come with their data location. A transfer outside the EEA gets its transfer impact assessment prefilled on Pro.
A privacy policy that covers AI
Your policy says which activities use AI, with which tools, and what people are told, from your records only.
Let your AI assistant fill it in
On Pro, Claude, ChatGPT or Cursor mark and classify your AI uses and record your literacy measures, each change confirmed by you.
Built to hold your records safely.
How Privacyboard protects the workspace you share with your team, your adviser or your auditor.
Stored in the EU
Your workspace data is stored in the European Union. US providers, such as hosting and email, are covered by the EU-US Data Privacy Framework or standard contractual clauses.
Two-step verification
With an authenticator app and recovery codes. Business can require it for everyone.
Roles for every person
Invite your team, an adviser or your auditor as owner, admin, editor or viewer, up to 50 people on Business. Pro adds one person who edits with you. Removing someone ends their access at once.
An activity log
Who changed what and when, kept 3 years on Business.
Personal data kept close
Consent is logged without IP addresses, and AI assistants never see who sent a request.
Yours to take away
Export your workspace and download your validated documents whenever you like.
Which plan fits a company using AI
Start on Free: mark your AI uses, classify them, record your AI literacy measures and screen your activities for a DPIA. Move to Pro to complete DPIAs and transfer impact assessments, and to let your AI assistant do the data entry. Choose Business when customers send security questionnaires about your use of AI.
Go online for free. Grow when you need to.
Free puts you online. Pro adds requests, monitoring and your team; Business, security questionnaires and only your brand.
Free
$0 forever
No card, no time limit
For getting compliant and going online on your own.
Start for freeKey features:
- Privacy and cookie policies
- Vendor and processing registers
- Requests and breaches tracked
- Impact assessment screening
- AI Act screening
- Privacy center on privacyboard.io
- Cookie banner on 1 domain
- 1 person
- And 1 more on the pricing page
No card needed
ProRecommended
$20 per month
Billed $240 a year Save $48
For founders who want to be compliant in a few clicks and stay that way.
Start with ProEverything in Free, plus:
- DPA for your clients
- Vendor monitoring
- Reminders for documents and reviews
- Request form and replies
- Your own domain
- Banner on 3 domains, every choice logged
- Weekly site scan
- Complete DPIAs and TIAs
- AI assistant connector
- 2 people
- And 1 more on the pricing page
Cancel any time
Business
$109 per month
Billed $1,308 a year Save $240
For the person in charge of privacy: every detail in order, a team with roles, and proof for audits and customers.
Start with BusinessEverything in Pro, plus:
- Up to 50 people, with roles
- PDF and Excel exports
- Signed agreements on vendors
- Activity log kept 3 years
- Security questionnaires answered for you
- No Privacyboard mention
- Center in English and French
- Evidence pack in one click
- Banner on 10 domains, daily scan
- Two-step verification required
- And 3 more on the pricing page
Bank transfer on request
Questions, answered.
Does the EU AI Act apply to a company that only uses ChatGPT or Copilot?
Yes, as a deployer, though with lighter duties than a provider: AI literacy for the people who use it since February 2025, transparency duties for some uses such as chatbots from August 2026, and more for high-risk uses such as screening job candidates. Privacyboard shows what applies to each use.
Does Privacyboard decide the classification for me?
No. It asks the questions of the Act and offers ticked what your records point to, such as a chatbot for an AI support tool. You confirm each answer, and the result follows from your answers. For an unusual or high-risk use, check with a professional.
Is AI literacy a certificate?
No. Article 4 asks you to take measures suited to each role and risk, not to pass a test. Privacyboard records the measures you took so you can show them.
Do I need a DPIA for an AI tool?
Often, when it processes personal data: AI counts as an innovative technology, one of the criteria. Privacyboard screens each activity and says when a DPIA is likely needed; screening is free and the complete DPIA is on Pro.
Does Privacyboard use AI to draft my documents?
No. Documents are drafted from rules and your answers. AI is used only where you ask for it: suggested answers to security questionnaires and translations on Business, always for you to approve.
Features to start with
Impact assessments
Screen each activity for a DPIA, and assess transfers outside the EEA.
Learn moreProcessing register
Keep your record of processing activities, with 16 ready-made activities to start from.
Learn moreVendor list
Document every tool that handles personal data, prefilled for 1,290+ common tools.
Learn more
