Skip to content
Diagnostic Centre89 free tools: diagnostics, builders, planners, visa check · no sign-upFree
About
Programmes
Approach in Action
Blueprints
DiagnosticsFree
Insights
Contact
When you finish, see where you stand among other professionals and challenge a colleague to beat your score.

Home › Free tools › AI Governance and EU AI Act Readiness Assessment

AI Governance and EU AI Act Readiness Assessment

Use this assessment if your organisation builds, buys or uses AI systems, from chatbots and document tools to scoring or eligibility systems.⁣​‌​‌​​‌​​‌‌​​​‌‌​‌‌​‌‌‌​​‌‌‌​‌‌‌​​‌​‌‌‌​​​‌‌​​​‌​‌‌‌‌​​​​‌‌​‌‌​​⁣ It checks you against the EU AI Act timeline as amended by the 2026 Digital Omnibus on AI, the OECD AI Principles (updated May 2024), the NIST AI Risk Management Framework and the ISO/IEC 42001 AI management system standard. You get a readiness score by area, the gaps that matter most and the training that closes them. This is a real readiness tool: each question is drawn from the current official texts listed under "Based on", and Risalat's guideline monitor re-checks those sources every two weeks so the questions follow new editions.

  • Assessment
  • 12 min
  • Free
  • Sources checked October 2026

Who it is for

  • Ministries, agencies and regulators using or procuring AI tools
  • Project teams adding AI to donor-funded digital projects
  • Consulting firms and suppliers working with EU clients
  • Data, ICT, legal and compliance officers
  • Managers preparing for ISO/IEC 42001 certification

What you get

  • A readiness score across six AI governance areas
  • A list of your AI systems that may be prohibited, high-risk or subject to transparency duties
  • The key EU AI Act dates that apply to you
  • Practical next steps for each weak area
  • Programmes that build the missing skills

How this tool works

Built on
Regulation (EU) 2024/1689 (Artificial Intelligence Act); AI Act Service Desk: implementation timeline; OECD AI Principles
Scoring
Each answer scores from 0 (not in place) to 4 (fully in place). An area's score is the points earned as a share of the maximum for the questions you answered; the overall score is the average of the areas. Bands: Early stage 0–39%, Developing 40–69%, Ready 70–100%.
Your data
What you type stays in your browser unless you save it to a free account. We receive your name, email and summary only when you open your results.
Sources checked
October 2026 (checked every month)
Team or organisation
With a free account you can invite colleagues from each department to answer the same questions. You get a consolidated dashboard: scores by area and department, where colleagues disagree, priority gaps and an action plan. Anonymous mode hides names and groups departments with fewer than 3 responses.

Need a verified result? Ask for an independent assessment by Risalat.

Questions

Does the EU AI Act apply to organisations outside the EU?

It can. It applies to providers placing AI systems on the EU market and to providers and deployers outside the EU when the output of the AI system is used in the EU. Donor-funded projects often follow EU-style rules through their financing agreements too.

What did the Digital Omnibus on AI change?

It moved the start of the high-risk rules: Annex III systems from 2 December 2027 and AI in Annex I regulated products from 2 August 2028.⁣​‌​‌​​‌​​‌‌​​​‌‌​‌‌​‌‌‌​​‌‌‌​‌‌‌​​‌​‌‌‌​​​‌‌​​​‌​‌‌‌‌​​​​‌‌​‌‌​​⁣ It also added new prohibitions from 2 December 2026. Other dates, such as AI literacy and prohibitions from 2 February 2025, stay in place.

What is AI literacy?

Providers and deployers must take measures so that staff dealing with AI have enough knowledge of how it works, its risks and its limits, taking their role and the context into account.

Is ISO/IEC 42001 mandatory?

No. It is a voluntary management system standard, but it gives an auditable structure for AI governance and can support compliance and client confidence.