EU AI Act: prohibited practices and the AI literacy duty already apply. High-risk obligations apply from 2 December 2027 (Annex III) and 2 August 2028 (Annex I).

AI audit readiness

Make AI governance evidence ready for review.

Build a clear evidence trail from AI systems and risks to controls, decisions and ongoing oversight.

Audit readiness is an operating discipline.

01

Inventory systems, owners, providers and dependencies.

02

Assess risk, impact, obligations and material use cases.

03

Test controls for oversight, data, change and incidents.

04

Retain prompts, source documents, model versions, logs and decisions.

05

Map evidence to requirements and prepare for independent review.

What Alive does not do

Alive supports readiness, evidence preparation, gap analysis and implementation. It does not issue certificates, act as a certification body or provide legal advice. Certification is performed by accredited third-party bodies.

Discuss your readiness starting point

Inside Alive Assist

Nine layers in every report, one structure across EU AI Act, ISO/IEC 42001 and NIST

Each assessment opens as a summary and goes down layer by layer: requirement coverage, gaps with their sources, prioritised actions, a control matrix, a risk register, evidence confidence, exposure scenarios and a board decision pack. Because the structure is identical for every framework, results line up side by side.

Regulation (EU) 2024/1689

EU AI Act readiness

8%

readiness in this sample run

Reflects the evidence supplied, so it rises as gaps are closed.

The nine layers

  • Executive summary
  • Requirement coverage
  • Gap analysis with sources
  • Prioritised actions
  • Control matrix
  • Risk registerShown
  • Evidence confidence
  • Exposure scenarios
  • Board decision pack
Alive Assist EU AI Act readiness report showing 8% readiness and nine collapsed report layers
EU AI Act risk register listing five risks with likelihood, impact, rating and treatment

Risk register, layer by layer. Open the risk register and every obligation for high-risk AI systems appears with likelihood, impact, a rating and a treatment: risk management system, data governance, technical documentation per Annex IV, transparency to deployers, and record-keeping.

Screens are from Alive Assist sample runs. Readiness reflects the evidence supplied in that run and is not an assessment of any organisation. Alive does not give legal advice or certify compliance.