EU AI Act Assessment Hub
Seven guides, one per assessment: what the law requires, who must do it, and what Scanara’s guided assessment does.
Which assessments does the EU AI Act require?
Which assessment applies depends on your role and your system’s risk class. The Article 5 bans apply to every operator, so screen each AI system against them first. Providers of high-risk AI systems then run a risk management system (Article 9) and a conformity assessment (Article 43). Some deployers must carry out a fundamental rights impact assessment (Article 27). The GDPR adds a data protection impact assessment.
Scanara offers a guided assessment for each; the decision stays with you. Next step: open the guide that matches your role.
Seven assessment guides
AI risk assessment (AIRA): the Article 9 risk management system
Providers of high-risk AI systems must run a risk management system (Article 9). AIRA is Scanara’s guided assessment for it.
Conformity assessment under Article 43: Annex VI or Annex VII
Providers of high-risk AI systems follow Annex VI or Annex VII (notified body). Article 43 decides which.
Fundamental rights impact assessment (FRIA) under Article 27
Which deployers must carry out a FRIA before first use, what it covers, and how it relates to the GDPR DPIA.
Data protection impact assessment (DPIA) for AI systems: GDPR Article 35
The DPIA is a GDPR duty, not an AI Act duty. When AI systems need one and how it relates to the FRIA.
Screening AI systems against the Article 5 bans
Article 5 bans ten AI practices. Fines reach EUR 35 million or 7% of worldwide turnover, whichever is higher.
Deployer obligations for high-risk AI systems: Article 26
What deployers of high-risk AI systems must do under Article 26, and how Scanara structures the work.
GPAI provider assessment: Articles 53 to 55
Providers of general-purpose AI models: the duties of Articles 53 to 55 and Scanara’s guided assessment.
Scanara prepares evidence from your repositories
Scanara reads your connected GitHub repositories and runs rule-based scans for standard AI and machine-learning patterns. It can miss non-standard code. Separately, it generates draft documentation from templates and your assessment answers as evidence for your compliance work. You make the classification decisions.