February 2, 2025 · Prohibitions and AI literacy
Unacceptable-risk practices are banned. Organizations must support AI literacy among the people who use AI systems.
Regulation (EU) 2024/1689 · AI Act
Measure your readiness for the EU AI Act.
Your team already uses ChatGPT, Copilot or Gemini. Audexa helps you see which AI is in use, the risk of each use, which obligations apply to you and how to prove it, with human review always as the final step.
- 24 AI tool templates
- Classification with cited articles
- Public transparency page
24 use templates: 21 AI products and 3 generic
38 obligations and good practices with application dates
94 ISO/IEC 42001 controls to go beyond the legal minimum
3 staff surveys: AI use, AI literacy and policy
What the AI Act requires
The AI Act applies in phases, and some have already arrived.
Regulation (EU) 2024/1689 regulates AI according to its risk. The Digital Omnibus (Regulation (EU) 2026/1744), in force since July 27, 2026, postponed the high-risk obligations but kept those that already applied.
August 2, 2025 · General-purpose AI models
Obligations for providers of general-purpose AI models, and the governance and penalties regime takes effect.
August 2, 2026 · Transparency
Article 50 obligations: inform people when they interact with AI and label generated or manipulated content.
December 2, 2027 · Annex III high-risk
High-risk systems in areas such as employment, education, credit or critical infrastructure, following the Omnibus postponement.
August 2, 2028 · Annex I high-risk
AI built into already-regulated products, such as medical devices, machinery or toys.
Penalties
The regulation provides for fines of up to €35 million or 7% of worldwide annual turnover for prohibited practices, with lower amounts for other infringements.
Sources: Regulation (EU) 2024/1689 (EUR-Lex) · AI Digital Omnibus, Regulation (EU) 2026/1744 (Cuatrecasas)
How Audexa helps
AI governance, from the tool to the evidence.
An inventory of uses, indicative classification, obligations backed by evidence and external transparency, in a single module.
Inventory
Know which AI is used and for what.
Guided registration
Add each use from 24 templates with what the provider declares: training, data residency and DPA.
Shadow AI
An alert when the software inventory contains AI tools without a registered use.
Supplier questionnaires
Send questionnaires via single-use links and save the answers as evidence.
Classify
Understand the risk of each use.
Indicative classification
Scope, prohibited practices, Annexes I and III, the Article 6(3) exception and transparency, with the articles cited.
Human validation
A review workflow in which an accountable person validates the classification, never their own.
Obligations with evidence
Each obligation has a date and an owner, and it closes only with approved evidence.
Prove
Internal proof and external transparency.
AI literacy
Staff surveys with no account required, plus coverage of the signed AI use policy.
AI incidents
An incident register with the Article 73 reporting deadlines and alerts before they expire.
Transparency page
A public page with your logo and colors, embeddable on your website, with a QR code and PDF.
Some features depend on your plan and active modules.
Risk classification
Classify every AI use and understand why.
The wizard walks through the regulation's scope, prohibited practices, the high-risk annexes, the Article 6(3) exception and transparency obligations. Each result shows the articles that support it and remains pending human validation.
- Out of scope, prohibited, high-risk, transparency or minimal risk
- Your organization's role: provider or deployer
- Prohibited practices are always answered by a person
- Reminders 90, 30 and 7 days before each legal milestone
AI literacy and policy
Show that your staff know how to use AI.
Launch surveys on AI use, AI literacy and awareness of your internal policy. Employees answer with a code sent by email, without creating an account, and you see aggregated results.
- Invitation by email or by a link restricted to your domains
- Aggregated results, without exposing individual answers
- Responsible AI use policy ready to sign
- Literacy coverage as evidence for Article 4
AI literacyStaff
- AI use survey84% responded
- AI literacy testIn progress
- Signed AI use policy71% of staff
- Leadership trainingCompleted
Transparency
Publish how you use AI, under your own brand.
Generate a public transparency page listing your AI uses, designed with your logo and colors. Only what an accountable person approves is published, and never prohibited or out-of-scope uses.
- Four designs and eight sections you can enable and reorder
- Embeddable on your website, with a badge, QR code and PDF
- Option to keep it out of search engines
- Only owners and administrators can publish
Transparency pagePublished
- How we use AIVisible
- Tools and providersVisible
- Human oversightVisible
- Contact and complaintsVisible
How it works
Three steps to bring order to AI use.
Register uses
Add tools from templates and detect the AI nobody had registered.
Classify and validate
Get an indicative classification with cited articles and have an accountable person validate it.
Comply and publish
Close obligations with evidence, measure AI literacy and publish your transparency page.
Frequently asked questions
What people usually ask us about AI Act.
We only use ChatGPT or Copilot. Does the AI Act affect us?
Yes. By using AI in your business you are a deployer: you must support AI literacy among the people who use it and, depending on the use, meet transparency obligations or, if the use is high-risk (for example, recruitment), the specific obligations that will apply from December 2027.
When do the high-risk obligations apply?
Following the Digital Omnibus (Regulation (EU) 2026/1744), the rules for Annex III high-risk systems apply from December 2, 2027 and those for Annex I systems from August 2, 2028. The prohibitions, AI literacy and Article 50 transparency obligations were not postponed.
Is Audexa's classification legal advice?
No. The classification is indicative: it shows the supporting articles and always requires validation by an accountable person. For complex decisions we recommend legal support.
How does it relate to ISO/IEC 42001?
Audexa includes the ISO/IEC 42001 audit with 94 controls, and AI Act obligations are linked to its controls so your compliance work also supports an AI management system.
Do national AI laws also apply?
The AI Act is an EU regulation, so it applies directly in every Member State. Each Member State designates its own supervisory authorities and sets the rules on penalties, and the status of those national measures varies by country. Check the situation in the countries where you operate.
Which plan do I need?
The AI Governance module is available on the Premium and Diamond plans.
Request a demo
Find out how much AI your company uses and what it requires.
In a 30-minute demo we register a couple of real uses, classify them and show you the obligations, surveys and transparency page.
- We identify the most common AI uses in your sector.
- We show you the classification and the obligations it triggers.
- We explain how to demonstrate your staff's AI literacy.