The EU AI Act, for companies that use AI every day.
The AI Act applies to companies that use AI (deployers) and those that build it (providers), with duties set by the risk of each use. Privacyboard classifies your uses in a few questions and records your AI literacy measures.
Free to set up · No credit card · Checked 12 November 2026
In short
- Applies to
- Companies using or selling AI in the EU
- For everyone
- AI literacy, since 2 February 2025
- Maximum fine
- EUR 35 million or 7% of turnover
- In Privacyboard
- On every plan, Free included
What the AI Act asks, and where it lives
Pick a duty to see the screen that handles it.
What the law asks
Duties attach to each use, so start with a list.
In Privacyboard
Each activity says whether it uses AI. Known AI tools suggest it.
Every plan
Show all 5 duties as a list
InventoryKnow where you use AIEvery plan
What the law asks: Duties attach to each use, so start with a list.
In Privacyboard: Each activity says whether it uses AI. Known AI tools suggest it.
Art. 5, 6, 50Classify each useEvery plan
What the law asks: Prohibited, high risk, transparency duties or minimal risk.
In Privacyboard: Three short sets of questions, and what applies from when.
Art. 4Support AI literacyEvery plan
What the law asks: Take measures so your people understand the AI they use.
In Privacyboard: Trainings, rules and guides recorded with their dates.
Art. 50Tell people they deal with AIEvery plan
What the law asks: Disclose chatbots and generated content.
In Privacyboard: Uses with this duty flagged, and an AI section in your policy.
GDPRKeep the data side in orderEvery plan
What the law asks: AI tools processing personal data still fall under the GDPR.
In Privacyboard: AI vendors with region and transfer tool, in the same register. DPIAs and TIAs on Pro.
The numbers to know
or 7% of turnover, for prohibited practices
or 3% of turnover, for most other duties
each use falls into one
For SMEs, each fine is capped at the lower of the two amounts.
What applies, and from when
In force
Duties then apply in stages.
Bans, AI literacy
Prohibited practices must stop.
General-purpose AI
Duties for model providers.
Transparency
Chatbots and generated content disclosed.
New bans
Practices added in 2026 are banned.
ComingHigh-risk uses
Recruitment, education, credit scoring.
ComingRegulated products
AI in machinery, medical devices.
Coming
What Privacyboard covers, and what it does not
Covered
- A list of activities that use AI
- A risk classification for each use
- What applies, and from when
- AI literacy measures with dates
- An AI section in your privacy policy
Not covered
- Technical documentation and CE marking for high-risk providers
- Registration in the EU database
- Duties of general-purpose AI model providers
Privacyboard is a guidance tool, not legal advice.
Your first hour
- 1
Say you use AI
The AI Act tab appears.
- 2
Mark the activities
Known AI tools suggest them.
- 3
Classify each use
Three short sets of questions.
- 4
Record AI literacy
Each training or rule, dated.
Go online for free. Grow when you need to.
Free puts you online. Pro adds requests, monitoring and your team; Business, security questionnaires and only your brand.
Free
$0 forever
No card, no time limit
For getting compliant and going online on your own.
Start for freeKey features:
- Privacy and cookie policies
- Vendor and processing registers
- Requests and breaches tracked
- Impact assessment screening
- AI Act screening
- Privacy center on privacyboard.io
- Cookie banner on 1 domain
- 1 person
- And 1 more on the pricing page
No card needed
ProRecommended
$20 per month
Billed $240 a year Save $48
For founders who want to be compliant in a few clicks and stay that way.
Start with ProEverything in Free, plus:
- DPA for your clients
- Vendor monitoring
- Reminders for documents and reviews
- Request form and replies
- Your own domain
- Banner on 3 domains, every choice logged
- Weekly site scan
- Complete DPIAs and TIAs
- AI assistant connector
- 2 people
- And 1 more on the pricing page
Cancel any time
Business
$109 per month
Billed $1,308 a year Save $240
For the person in charge of privacy: every detail in order, a team with roles, and proof for audits and customers.
Start with BusinessEverything in Pro, plus:
- Up to 50 people, with roles
- PDF and Excel exports
- Signed agreements on vendors
- Activity log kept 3 years
- Security questionnaires answered for you
- No Privacyboard mention
- Center in English and French
- Evidence pack in one click
- Banner on 10 domains, daily scan
- Two-step verification required
- And 3 more on the pricing page
Bank transfer on request
Questions, answered.
Does it apply if we only use ChatGPT?
Yes, as a deployer. Most such uses are minimal risk: AI literacy is the main duty.
Do we need an AI literacy certificate?
No. Article 4 asks for measures, not a certificate. Record what you do.
Did the Digital Omnibus delay the AI Act?
It moved the high-risk dates to December 2027 and August 2028. Bans and AI literacy already apply.
Does it replace the GDPR for AI tools?
No, both apply.
Official sources
- Regulation (EU) 2024/1689 (AI Act), EUR-Lex
- Regulation (EU) 2026/1744 (Digital Omnibus on AI), EUR-Lex
Checked on 12 November 2026. Laws and guidance change: read the official text before you rely on a figure.
Read more
Other regulations
Features to start with
Impact assessments
Screen each activity for a DPIA, and assess transfers outside the EEA.
Learn moreProcessing register
Keep your record of processing activities, with 16 ready-made activities to start from.
Learn moreAI assistant connector
Your AI assistant already knows your company. Let Claude, ChatGPT or Cursor fill in your vendors, register and assessments, then answer from your records.
Learn more
