The EU AI Act is here. Know if your AI is ready — before the deadline.
On 2 August 2026 the EU AI Act's obligations for high-risk AI become enforceable, with penalties up to EUR 35M or 7% of global turnover. Our EU AI Act Readiness Scan gives you an independent, expert read on exactly where you stand — and what to fix first.
EU AI Act high-risk obligations become enforceable on:
The fines are real, and the clock is running
The EU AI Act is the world's first comprehensive AI law, and it reaches well beyond Europe — if your AI is placed on the EU market or its output is used in the EU, you can be in scope no matter where you are based. The most serious breaches carry fines of up to EUR 35 million or 7% of global annual turnover, whichever is higher. A readiness scan is the cheapest way to find your gaps before a regulator does.
Start your Readiness ScanScoped with you before you are charged. No payment until you approve the scope.
What non-compliance can cost
The EU AI Act sets penalties in tiers — and they scale with your global turnover.
For deploying a prohibited AI practice — the most serious breach.
For breaching most high-risk obligations and other requirements of the Act.
For supplying incorrect, incomplete or misleading information to authorities.
Each tier is "whichever is higher" — the cap or the percentage of worldwide annual turnover.
Mapped to the EU AI Act, article by article
For each AI system you bring, a verified auditor classifies its risk tier and checks it against the high-risk obligations in Articles 9–15 — then hands you a prioritised gap list.
Risk management system
A continuous, documented process to identify and mitigate risks across the AI lifecycle.
Data & data governance
Training, validation and testing data that is relevant, representative and checked for bias.
Technical documentation
The dossier that demonstrates conformity — drawn up before the system is placed on the market.
Record-keeping (logging)
Automatic, tamper-evident logs of events over the system's lifetime for traceability.
Transparency to deployers
Clear instructions for use so the people running the system understand its limits.
Human oversight
Measures that let a person understand, monitor and override the system in operation.
Accuracy, robustness & security
Appropriate performance, resilience to errors, and protection against adversarial attacks.
How the EU AI Act phases in
The obligations arrive in waves. High-risk systems are next.
Start with the Readiness Scan
A fast, fixed-price first read. Go deeper with a full Compliance or Risk Audit when you're ready.
A fast, expert read on your EU AI Act exposure.
- Risk-tier classification for up to 3 AI systems
- Gap check against Articles 9–15
- Prioritised action list you can act on
- A recorded findings readout
A thorough review against the regulations that apply to you.
- Full EU AI Act compliance gap assessment
- Mapping to HIPAA, SOC 2, India DPDP and more
- Remediation roadmap with priorities
- Documentation & policy review
Our deepest audit — bias, security, governance and model risk.
- Everything in the Compliance Audit, plus:
- Bias & fairness testing
- Security & adversarial review
- Board-ready risk briefing
All audits are scoped with you before any payment is taken.
EU AI Act questions, answered
What is the EU AI Act?
The EU AI Act is the world's first comprehensive law regulating artificial intelligence. It classifies AI systems by risk — prohibited, high-risk, limited and minimal — and places binding obligations on the providers and deployers of high-risk AI, with penalties for non-compliance.
When does the EU AI Act take effect?
It entered into force on 1 August 2024 and phases in. Prohibited practices applied from 2 February 2025, general-purpose AI rules from 2 August 2025, and the core obligations for high-risk AI systems become enforceable on 2 August 2026. Certain high-risk systems embedded in regulated products follow on 2 August 2027.
Does the EU AI Act apply to my company if we are not in the EU?
Often, yes. The Act applies extraterritorially: if you provide or deploy an AI system that is placed on the EU market, or whose output is used in the EU, you can fall within scope regardless of where your company is based — much like the GDPR.
What are the penalties under the EU AI Act?
Fines reach up to EUR 35 million or 7% of total worldwide annual turnover for prohibited practices, up to EUR 15 million or 3% for breaching most other obligations, and up to EUR 7.5 million or 1.5% for supplying incorrect information — whichever is higher.
What is a high-risk AI system?
High-risk systems include AI used in areas such as employment and worker management, education, access to essential services and credit, biometric identification, critical infrastructure, law enforcement and certain regulated products. These carry the full Article 9–15 obligations.
What is the EU AI Act Readiness Scan?
It is iDharma's $5,000 Quick Scan focused on EU AI Act readiness. A verified auditor reviews up to three AI systems, classifies their risk tier, maps them against the Article 9–15 obligations, and gives you a prioritised gap list and action plan in about one week.
How is the Readiness Scan different from a full compliance audit?
The Readiness Scan is a fast, fixed-price first read on where you stand. A full Compliance Audit ($15,000) is a deeper, documented assessment across the EU AI Act and other frameworks with a remediation roadmap and evidence review — the natural next step once the scan shows your exposure.
What do we get at the end?
A risk classification for each system, an obligation-by-obligation gap assessment mapped to the EU AI Act articles, a prioritised action list you can hand to your team, and a recorded readout — delivered in about a week.
Find out where you stand on the EU AI Act
Independent, expert-led, and fixed-price. Get a clear read on your readiness in about a week.
Start your Readiness Scan