Question 1

What makes an AI use case high-risk?

Accepted Answer

An AI use case is high-risk when it directly affects individuals (hiring, credit, healthcare, legal decisions), involves personal data processed at scale, or operates without human review. The EU AI Act specifically designates certain categories as high-risk requiring conformity assessment.

Question 2

What does a Critical risk rating mean?

Accepted Answer

Critical means AI is making decisions that affect individuals with no human review in the loop. This configuration is non-compliant under multiple frameworks including the EU AI Act and FTC guidance. You should implement human oversight before scaling this use case.

Question 3

How do I use this assessment for compliance?

Accepted Answer

Download the CSV to create an AI register — a record of your AI use cases, their risk levels, and mitigations. Use it as evidence of due diligence. Then use the Policy Generator to create an AI acceptable use policy covering your specific use cases.

Question 4

What is an AI register?

Accepted Answer

An AI register is a log of every AI system your organisation uses, documenting what it does, what data it processes, who is responsible, and what controls are in place. The EU AI Act and NIST AI RMF both recommend maintaining one. The CSV download from this tool gives you a starting point.

Rate your AI use cases

What does your team use AI for?

Rate your AI use cases

What does your team use AI for?