Company & AI System Information
Identify the provider and AI system for which technical documentation will be generated.
Documentation per Annex IV of Regulation (EU) 2024/1689
AICheck structures your technical documentation point by point against the 9 requirements of Annex IV, assesses your system's risk level per Art. 6 + Annex III, and generates a complete dossier including risk classification, technical documentation, Declaration of Conformity template (Art. 47/Annex V), and a customized compliance calendar.
AICheck v1.0 covers risk classification (Art. 5 and 6 + Annex III) and provider technical documentation (Art. 11 + Annex IV) of Regulation (EU) 2024/1689. Deployer obligation modules (Art. 26-27) and regulated-product AI systems (Annex I) will be added once implementing acts and the Digital Omnibus are formally adopted. SolidwareTools monitors the OJEU and EUR-Lex weekly to ensure this product reflects current law.
Art. 62 — SMEs are entitled to simplified documentation. Art. 99.6 — fines are calculated using the lower of the two amounts.
Art. 111 — Systems already on the market before 8/2/2026 only need to comply when they undergo significant changes.
Describe in 2–3 sentences what your system does, what type of data it processes, and what decisions or outputs it generates.
Risk Classification
Determine whether your system engages in prohibited practices (Art. 5), is high-risk (Annex III), or has transparency obligations (Art. 50). Each question references the exact article of the Regulation.
🚫 Block A — Prohibited Practices (Art. 5)
The following practices have been prohibited in the EU since February 2, 2025. Fine: up to €35,000,000 or 7% of total worldwide annual turnover (Art. 99.3). Answer honestly. If your system engages in any of these practices, documentation will not be generated.
Each question is a simplified assessment. See the official European Commission Guidelines (2/4/2025) for a full analysis of cumulative conditions.
Each question is a simplified assessment. See the official European Commission Guidelines (2/4/2025) for a full analysis of cumulative conditions.
Does your system use subliminal, manipulative, or deceptive techniques to alter a person's behavior in a way that causes or is likely to cause significant harm?
Reference: Art. 5(1)(a)
Example that IS covered: a system that manipulates the interface to make users take financial decisions against their interest. Example that is NOT covered: a product recommendation system in an e-commerce store.
Does your system exploit the vulnerabilities of a specific group of persons (age, disability, economic or social situation) to alter their behavior in a harmful way?
Reference: Art. 5(1)(b)
Example that IS covered: an app using dark design patterns targeting minors to encourage spending. Example that is NOT covered: an accessibility system designed for persons with disabilities.
Does your system evaluate or classify individuals based on their social behavior or personal characteristics to assign them detrimental or disproportionate treatment (social scoring)?
Reference: Art. 5(1)(c)
Example that IS covered: a system that scores citizens by social behavior and restricts services. Example that is NOT covered: a credit score based on financial data (that is high-risk, not prohibited).
Does your system predict the risk of an individual committing a criminal offense based solely on their profile or personality traits?
Reference: Art. 5(1)(d)
Exception: systems that support human assessment based on objective facts directly linked to criminal activity are not prohibited (but may be high-risk).
Does your system create or expand facial recognition databases through untargeted scraping of facial images from the internet or CCTV footage?
Reference: Art. 5(1)(e)
Does your system infer the emotions of natural persons in the workplace or educational institutions?
Reference: Art. 5(1)(f)
Exception: systems for medical or safety purposes (e.g. detecting pilot fatigue) are not prohibited.
Does your system categorize individuals based on biometric data to deduce their race, political opinions, trade union membership, religion, sex life, or sexual orientation?
Reference: Art. 5(1)(g)
Exception: labeling or filtering of biometric datasets lawfully acquired in the law enforcement context is not covered.
Does your system perform real-time remote biometric identification in publicly accessible spaces for law enforcement purposes?
Reference: Art. 5(1)(h)
Limited exceptions: searching for kidnapping/trafficking victims, preventing imminent terrorist threat, locating suspects of serious crimes listed in Annex II. All require prior or ex post judicial authorization (Art. 5.2–5.4).
Risk Classification — Annex III
Determine whether your system is high-risk per Art. 6 and Annex III of the Regulation.
Application status: Obligations for Annex III high-risk systems are scheduled for August 2, 2026 per Art. 113 of Regulation (EU) 2024/1689. The Digital Omnibus (in trilogue, political agreement expected April 2026) proposes postponing this date to December 2, 2027. See EUR-Lex for the current date.
Question 3.1 — Is your AI system used in any of the following use cases?
You may check multiple. Reference: Annex III, points 1–8.
Biometrics — Annex III, point 1
Critical infrastructure — Annex III, point 2
Education & training — Annex III, point 3
Employment & worker management — Annex III, point 4
Essential services — Annex III, point 5
Law enforcement — Annex III, point 6
Migration, asylum & border control — Annex III, point 7
Administration of justice — Annex III, point 8
None of the above
Technical Documentation — Annex IV, Points 1–5
Complete the technical information for your AI system. Each field indicates the exact Annex IV point it covers.
The information is provided by you under your responsibility. AICheck structures it per Annex IV of Regulation (EU) 2024/1689. You do not need to share source code or trade secrets.
📄 Point 1 — General system description (Annex IV, point 1)
Annex IV, point 1(a). Auto-filled from Step 1.
Annex IV, point 1(b).
Annex IV, point 1(c). Indicate what data it receives from external sources (APIs, databases, sensors) and what outputs it sends to other systems.
Annex IV, point 1(d). Describe the current version, update frequency, and whether updates modify behavior.
Annex IV, point 1(e).
You may select multiple options (Ctrl+click or Cmd+click).
Annex IV, point 1(f) + Art. 13. What instructions does the business user receive on how to use the system, its limitations, and what human oversight it requires.
Art. 13(3)(b). What information does the deployer receive about: accuracy level, circumstances affecting performance, groups for which the system may not function correctly, and input data specifications.
⚙️ Point 2 — Design elements (Annex IV, point 2)
Annex IV, point 2(a). Model type, training process, general architecture.
Annex IV, point 2(b). Why this approach was chosen, what alternatives were considered, what assumptions were made.
Annex IV, point 2(c). System modules, data flow between them, critical components.
Annex IV, point 2(d). Hardware, cloud infrastructure, training time.
Annex IV, point 2(e). Optional field. If your system is built on GPT, Claude, Llama, Gemini, Mistral, etc.
🗂️ Point 3 — Training, validation, and test data (Annex IV, point 3)
Annex IV, point 3(a). Origin, size, time period, data categories.
Annex IV, point 3(b) + Art. 10. Directly collected, purchased, or synthetically generated? What cleaning and labeling process?
Annex IV, point 3(c).
Annex IV, point 3(d) + GDPR.
🧪 Point 4 — Testing and validation (Annex IV, point 4)
Annex IV, point 4(a). Accuracy, precision, recall, F1, AUC-ROC, false positive/negative rate, etc.
Annex IV, point 4(b). Quantitative results with validation and test sets.
Annex IV, point 4(c).
Annex IV, point 4(d) + Art. 60.
Annex IV, point 4(e) + Art. 15(1). If there are performance differences across groups (gender, age, ethnicity, etc.), describe them.
Art. 15(4). How does it behave with incomplete, incorrect, or adversarial data?
Art. 15(5). Encryption, access control, protection against adversarial attacks.
🛡️ Point 5 — Risk management system (Annex IV, point 5 + Art. 9)
Annex IV, point 5(a) + Art. 9(1-2). Continuous, iterative process of risk identification, analysis, and treatment. Who is responsible, how often is it reviewed.
Annex IV, point 5(b) + Art. 9(2). Include risks from intended use AND reasonably foreseeable misuse.
Annex IV, point 5(c) + Art. 9(4). For each risk, specify the concrete measure.
Annex IV, point 5(d) + Art. 9(7). What risks remain, are they acceptable, how did you determine this.
Technical Documentation — Annex IV, Points 6–9
Human oversight, activity logging, standards, conformity, and post-market monitoring.
👤 Point 6 — Human oversight (Annex IV, point 6 + Art. 14)
Annex IV, point 6(a) + Art. 14(1-2). How a human can supervise, intervene in, or override the system's decisions.
Annex IV, point 6(b) + Art. 14(4)(a).
Annex IV, point 6(c) + Art. 14(4)(b).
Annex IV, point 6(d) + Art. 14(4)(e). El supervisor humano debe poder interrumpir el funcionamiento en cualquier momento.
📋 Activity logging (Art. 12)
Art. 12(1-2). El sistema debe permitir la trazabilidad de su funcionamiento.
Art. 12(2-3). Types of events (inputs, outputs, decisions, errors, human interventions) and retention period.
📐 Point 7 — Harmonized standards (Annex IV, point 7 + Art. 40-41)
Optional field. As of April 2026, CEN/CENELEC has not yet published harmonized standards for the AI Act. Indicate any ISO standards or other specifications you have followed.
✅ Point 8 — EU Declaration of Conformity (Annex IV, point 8 + Art. 47)
Art. 47 + Annex V. The provider must draft a written EU Declaration of Conformity for each high-risk system. AICheck generates a template per Annex V as part of the dossier.
📡 Point 9 — Post-market monitoring (Annex IV, point 9 + Art. 72)
Annex IV, point 9 + Art. 72. How you will monitor performance once on the market: frequency, metrics, update procedure, incident management, deployer feedback.
Art. 73. Obligation to notify national authorities of any serious incident.
🏛️ Conformity assessment & registration (Art. 43 + Art. 49)
Art. 43. For most Annex III systems, the assessment is internal (Annex VI). Only remote biometric identification systems (Annex III, point 1) require a notified body (Annex VII).
Art. 49 + Art. 71. Mandatory before placing the system on the market.
📋 Quality Management System (Art. 17)
Art. 17(1): Providers of high-risk AI systems must establish a documented quality management system ensuring compliance with the Regulation. The system must be proportionate to the organization's size.
Art. 17(1)(a). Strategy to ensure compliance with the Regulation, including conformity assessment procedures and change management.
Art. 17(1)(b-c). Techniques, procedures, and systematic actions for design, development, testing, and version control.
Art. 17(1)(d). Verification, validation, and quality assurance procedures, including testing and defect correction.
Art. 17(1)(i-j). Human and technical resources allocated, and accountability framework with defined roles and responsibilities.
Art. 17(1)(g). Procedures for communication with national competent authorities and cooperation.
Art. 17(1)(h) + Art. 18. System for retaining technical documentation, logs, declarations of conformity, and other records.
Signatory Declaration & Summary
Review your dossier summary and sign the responsibility declaration before generating the documentation.
📊 Dossier summary
Company: —
Country: —
System: —
Sector: —
Size: —
On market: —
Risk classification:
—
Reference: AICHK- · Date:
Your dossier will include 12 documents:
• Doc 1: Risk Classification Report — Art. 5, 6, Annex III (4–6 pages)
• Doc 2: Technical Documentation — Annex IV, 9 points (8–15 pages)
• Doc 3: EU Declaration of Conformity — Art. 47, Annex V (2–3 pages)
• Doc 4: Customized Compliance Calendar — Art. 113 (2–3 pages)
• Doc 5: Executive Conformity Sheet (1–2 pages)
• Doc 6: Quality Management System — Art. 17 (3–5 pages)
• Doc 7: Instructions for Use for the Deployer — Art. 13 (3–5 pages)
• Doc 8: Evidence Retention Checklist (2–3 pages)
• Doc 9: Incident Report Template — Art. 73 (2 pages)
• Doc 10: AI Literacy Program — Art. 4 (2–3 pages)
• Doc 11: Provider-Deployer Contractual Clauses (3–4 pages)
• Doc 12: Risk Committee Review Minutes — Art. 9 (2–3 pages)
• Doc 1: Risk Classification Report — Art. 5, 6, Annex III (4–6 pages)
• Doc 2: Technical Documentation — Annex IV, 9 points (8–15 pages)
• Doc 3: EU Declaration of Conformity — Art. 47, Annex V (2–3 pages)
• Doc 4: Customized Compliance Calendar — Art. 113 (2–3 pages)
• Doc 5: Executive Conformity Sheet (1–2 pages)
• Doc 6: Quality Management System — Art. 17 (3–5 pages)
• Doc 7: Instructions for Use for the Deployer — Art. 13 (3–5 pages)
• Doc 8: Evidence Retention Checklist (2–3 pages)
• Doc 9: Incident Report Template — Art. 73 (2 pages)
• Doc 10: AI Literacy Program — Art. 4 (2–3 pages)
• Doc 11: Provider-Deployer Contractual Clauses (3–4 pages)
• Doc 12: Risk Committee Review Minutes — Art. 9 (2–3 pages)
Product version: AICheck v1.0 covers risk classification (Art. 5 and 6 + Annex III) and provider technical documentation (Art. 11 + Annex IV) of Regulation (EU) 2024/1689. Deployer obligation modules (Art. 26-27) and regulated-product AI systems (Annex I) will be added once implementing acts and the Digital Omnibus are formally adopted. SolidwareTools monitors the OJEU and EUR-Lex weekly to ensure this product reflects current law.
Your AICheck Dossier
Generate your complete technical documentation.
AI ACT · Regulation (EU) 2024/1689
Without Annex IV technical documentation, your high-risk AI system cannot legally operate in the EU from August 2026.
€249 / AI system
✔ Risk Classification Report (Art. 5, 6, Annex III)
✔ Annex IV Technical Documentation — all 9 points
✔ EU Declaration of Conformity — Annex V template
✔ Calendar + Sheet + QMS + Deployer + Checklist + 4 more
One-time payment · 10 regenerations · 30-day editing window · PDF is yours forever · 100% browser-side
How your license works:
1. Buy a license on Gumroad for €249.
2. You receive a key (XXXXXXXX-XXXXXXXX-XXXXXXXX-XXXXXXXX).
3. Paste it below and generate your dossier.
4. 1 license = 1 AI system. For a different system, new license.
1. Buy a license on Gumroad for €249.
2. You receive a key (XXXXXXXX-XXXXXXXX-XXXXXXXX-XXXXXXXX).
3. Paste it below and generate your dossier.
4. 1 license = 1 AI system. For a different system, new license.
High volume or packs with special pricing: hello@solidwaretools.com
This document was generated by AICheck (SolidwareTools) from information provided by the signatory. It does not constitute legal advice or a third-party audit. The accuracy of the data and effective compliance with applicable legal obligations are the sole responsibility of the signatory. SolidwareTools warrants that the structure of this document follows Article 11 and Annex IV of Regulation (EU) 2024/1689 as in force on the date of issuance. For personalized advice, consult a qualified professional.