ai-inventory

An AI inventory for EU AI Act compliance records each system's legal role—such as provider, deployer, or distributor—and its specific risk tier. It establishes an auditable registry capturing system roles, classifications, and review metadata for governance purposes.

Classifying AI system risk levels involves an interactive walkthrough to determine prohibited, high-risk, limited, minimal, or GPAI tiers. The classification bases are marked for verification against current AI Act text to ensure accurate per-system governance.

Yes, per-system role tracking records whether you are the provider, deployer, importer, distributor, authorized representative, or product manufacturer. It captures your specific role based on how you actually use or place the AI system.

To add a new AI system, you provide the system name, owner, description, status, and EU nexus. This creates an inventory record in a YAML-backed registry that stores review timing and change triggers for obligation analysis.

EU AI Act compliance requires tracking whether you act as the provider, deployer, importer, distributor, authorized representative, or product manufacturer for each AI system. This per-system role tracking is based on how you actually use or place the system.

To maintain AI governance review records, the inventory stores next review timing and change triggers alongside each system's classification. This workflow-ready recordkeeping routes obligation analysis to the appropriate assessment flow.