EU AI Act Advisor
Classify AI systems across the EU AI Act's four risk tiers, check the prohibited practices, map provider/deployer and GPAI obligations, plan conformity assessment and CE marking, and handle Art. 50 transparency.
The EU AI Act (Regulation 2024/1689) bans some AI outright, heavily regulates "high-risk" systems, and adds transparency duties for chatbots and synthetic media — with penalties rivaling GDPR. Most teams have no idea which tier their system falls into.
Who it's for: AI product and engineering teams shipping into the EU, AI governance and risk leads, providers and deployers of high-risk AI systems, GPAI model developers, legal and compliance teams classifying AI systems
Example
"Classify our AI system under the EU AI Act and list our obligations" → Risk-tier classification, a prohibited-practices check, the provider/deployer obligation set, and a conformity-assessment and transparency plan
CLAUDE.md Template
New here? 3-minute setup guide → | Already set up? Copy the template below.
# EU AI Act — Compliance Advisor
You are an expert EU AI Act compliance advisor with deep knowledge of **Regulation (EU) 2024/1689**, its Annexes, Recitals, and all implementing measures. Every response cites the governing Article, Annex, or Recital.
## 8-Step Workflow
**1 → Scope & Role Identification**
Determine whether the user is a **provider** (develops/places AI on market), **deployer** (uses AI under own authority), **importer**, **distributor**, or **authorised representative** (Art. 3). Identify the Member State(s) of operation.
**2 → AI System / GPAI Classification**
Confirm the system meets the Art. 3(1) definition of an AI system. If it involves a model trained at scale for multiple tasks, assess whether it is a **GPAI model** (Art. 3(63)) and whether it crosses the systemic risk threshold (Art. 51: ≥10²⁵ FLOPs training compute).
Get new playbooks like this one
One email a week with new Claude Code workflows. Free, like everything here.
No spam. Unsubscribe anytime.
What This Does
Turns Claude Code into an EU AI Act (Regulation (EU) 2024/1689) compliance advisor. It classifies AI systems across all four risk tiers, checks the 9 prohibited practices (Art. 5), maps the 8 Annex III high-risk use cases, lays out provider and deployer obligations (Arts. 9-17, 26), covers GPAI model obligations and the Code of Practice (Arts. 51-55), guides conformity assessment and CE marking (Arts. 43-48), handles EU AI database registration and Art. 50 transparency (chatbots, synthetic media, AI-generated content), and maps to ISO 42001, NIST AI RMF, and GDPR. Current as of the AI Omnibus phase-in timeline.
The Problem
The AI Act's obligations depend entirely on classification — and the line between minimal-risk, limited-risk (transparency), high-risk, and prohibited is subtle. Teams ship AI features without knowing whether they're a "provider" or "deployer," whether Annex III applies, what GPAI duties attach, or when CE marking and conformity assessment are required. The phase-in timeline and penalties make guessing expensive.
Quick Start
Step 1: Create Your Workspace
mkdir -p ~/Documents/EU-AI-Act
Step 2: Download the Template
mv ~/Downloads/CLAUDE.md ~/Documents/EU-AI-Act/
Step 3: Add Context (Optional)
Describe your AI system: purpose, users, data, decisions it influences, and your role in the value chain.
Step 4: Run Claude Code
cd ~/Documents/EU-AI-Act
claude
Step 5: Start
Say: "Classify our AI system under the EU AI Act and list our obligations."
Example Commands
"Which risk tier does our AI system fall into?"
"Check our use case against the 9 prohibited practices"
"Does our system match any Annex III high-risk area?"
"Are we a provider or a deployer, and what obligations follow?"
"What GPAI obligations apply, and what's in the Code of Practice?"
"Walk us through conformity assessment and CE marking"
"What Art. 50 transparency duties apply to our chatbot / synthetic media?"
"Map our AI Act work to ISO 42001 and NIST AI RMF"
What You Get
| Output | Contents |
|---|---|
| Risk Classification | Tier determination with reasoning |
| Prohibited-Practices Check | Art. 5 screening |
| Obligation Set | Provider/deployer/GPAI duties that apply |
| Conformity Plan | Assessment route, CE marking, registration |
| Framework Mapping | Crosswalk to ISO 42001, NIST AI RMF, GDPR |
Tips
- Classify first — every obligation flows from the risk tier and your role.
- Don't ignore transparency — limited-risk systems still owe Art. 50 disclosures.
- Reuse your ISO 42001 / NIST AI RMF work — much of it maps across.
Important Disclaimer
This is a compliance support tool, not legal advice. The AI Act's obligations and timeline continue to be clarified through guidance and delegated acts. Have qualified EU counsel review classifications before relying on them.