The first step in AI governance and regulatory compliance is knowing which AI systems are used in your organisation, for what purpose and with which data. This template helps you collect your inventory in a single table and flag each system's risk level with a preliminary assessment.
In the Excel file, fields with options come as drop-down lists, and there is a sheet describing each field and a short guide to the EU AI Act risk categories. The file also includes three example entries showing how the fields are filled in.
How to use it
- Define the scope: include models you build, AI features in purchased software and the generative AI tools employees use.
- Collect information from business units: ask each unit to list the AI systems they use, and ask about shadow AI too.
- Fill in one row per system: the owner, the data used and the impact on decisions are the most critical fields.
- Mark the risk category with a preliminary assessment: for systems you are unsure about, you can use our EU AI Act scope assessment.
- Prioritise: start with systems that make decisions about people, use personal data and have weak human oversight.