Templates and checklists
Choose material for the task. Before using it, add your actual tools, data, responsibilities and decisions. For materials about legislation, first establish which obligations apply to you.
Understand your current position
- AI inventory — guide and editable template — tools, uses, data and responsible people.
- Initial assessment and gap analysis — findings and missing evidence.
Prepare company rules
Seven policy templates cover related areas. You can combine them into a shorter document where appropriate; the number of separate policies is not the objective.
| Area | Material to adapt |
|---|---|
| Decisions and collaboration | Governance and responsibilities |
| AI use and output checks | AI system governance |
| Personal data | Data protection |
| Access and security | Security rules |
| Problems and response | Incident handling |
| Verification and changes | Ongoing review |
| Suppliers and exit options | Managing dependencies |
Prepare decisions and verification
- Options and cost comparison worksheet — baseline, alternatives, assumptions and a post-pilot decision.
- Evidence for review — requirements, answers, evidence and open findings.
- Training plans and records — objectives, examples, participation and checks on understanding.
Questions to assess your obligations
AI Act · GDPR · NIS2 · Data Act · DORA
For each item, record whether it applies, why, what evidence you have and what remains to be done. A completed list helps record your work; it does not by itself establish compliance.