register v11 · 228 columns · 19 bands
The register, as the workbook holds it
Nine worked AI systems across all 228 v11 columns, in the 19 bands and the colours of the file the register exports. 19 columns are calculated by the engine and are marked ƒ; 61 carry an obligation’s work status. The organisation is shown as “THE COMPANY”.
Entered by a personƒ calculated — never typedDoes not apply to this systemApplies — no status recordedTo doIn progressDoneVerified
64 hidden helper columns (FB…HM) are omitted: they are the 0/1 flags the workbook’s formulas read, not answers. The export writes them. Show them anyway
| 1 · IDENTIFICATION & MONITORING | 4 · OBLIGATIONS — UNIVERSAL | 4 · OBLIGATIONS — TRANSPARENCY (art.50) | 4 · OBLIGATIONS — HIGH RISK · PROVIDER | 4 · OBLIGATIONS — HIGH RISK · DEPLOYER (art.26) | 4 · OBLIGATIONS — FRIA (art.27) | 4 · OBLIGATIONS — art.6(3) · COMPONENT SUPPLY | 4 · OBLIGATIONS — GPAI PROVIDER (art.53-55) | 4 · OBLIGATIONS — IMPORTER / DISTRIBUTOR | 4 · OBLIGATIONS — GDPR (independent axis) | 1b · CONTEXT & INTAKE | 2 · SCOPE (art.2-3) | 2b · ROLE (art.3, art.25) | 2c · CLASSIFICATION (art.5, 6, Annex I & III) | 2d · TRANSPARENCY TRIGGERS (art.50) | 2e · GPAI (art.51-55) | 2f · GDPR & TRIGGERS | 3 · RESULT DETAIL & GOVERNANCE — DO NOT TYPE IN THE ▶ CELLS | I · ADDED ANSWER COLUMNS — appended past the workbook’s named bands | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ARef. | BProduct / project name | CAI system name | DConsolidation code & BU | EOwner | Fƒ▶ Risk level | Gƒ▶ Our role under the AI Act | Hƒ▶ Next deadline | Iƒ▶ What is due then | JƒObligations that apply | Kƒ▶ Progress (done / applicable) | LƒVerified by Compliance | Mƒ⚠ Problems to check before validating | NCompliance validation | ONext review due | PAI literacy (art.4) | QDisclose human–AI interaction (art.50(1)) | RMark synthetic content machine-readable (art.50(2)) | SInform persons exposed to emotion recognition / categorisation (art.50(3)) | TDisclose deep fake content (art.50(4), 1st subparagraph) | UDisclose AI-generated public-interest text (art.50(4), 2nd subparagraph) | VProvide the information clearly and distinguishably at the latest at first interaction or exposure, meeting accessibility requirements (art.50(5)) | WRisk management system (art.9) | XData and data governance (art.10) | YTechnical documentation (art.11 / Annex IV) | ZRecord-keeping / logs (art.12) | AAInstructions & transparency for the deployer (art.13) | ABHuman oversight (art.14) | ACAccuracy, robustness, cybersecurity (art.15) | ADQuality management system (art.17) | AEConformity assessment + CE + EU declaration (art.43/47/48) | AFRegistration in the EU database (art.49(1)-(2)) | AGRegistration at NATIONAL level — Annex III point 2 (art.49(5)) | AHName, registered trade name and contact address on the system or packaging (art.16(b)) | AIRetain technical documentation, QMS records and declarations for 10 years (art.18) | AJRetain automatically generated logs for at least 6 months (art.19) | AKCorrective actions and duty to inform the chain and authorities (art.20) | ALCooperate with authorities and demonstrate conformity on reasoned request (art.16(k), art.21) | AMAccessibility requirements — Directives (EU) 2016/2102 and (EU) 2019/882 (art.16(l)) | ANAppoint an EU authorised representative (art.22) | AOPost-market monitoring (art.72) | APReporting of serious incidents (art.73) | AQUse in accordance with the instructions for use (art.26(1)) | ARHuman oversight by competent persons (art.26(2)) | ASInput data relevant & sufficiently representative (art.26(4)) | ATMonitor operation & inform provider / authorities (art.26(5)) | AUKeep automatically generated logs ≥ 6 months (art.26(6)) | AVInform workers' representatives & affected workers (art.26(7)) | AWInform affected persons — Annex III systems making or assisting decisions about people (art.26(11)) | AXProvide clear and meaningful explanations of individual decisions on request (art.86) | AYUse the provider's art.13 information when carrying out the DPIA (art.26(9)) | AZCooperate with competent authorities on the high-risk system (art.26(12)) | BAFundamental rights impact assessment — FRIA (art.27) | BBNotify market surveillance authority of FRIA result (art.27(3)) | BCDocument the non-classification analysis (art.6(3)) | BDWritten agreement with the provider: information, capabilities, technical access (art.25(4)) | BETechnical documentation of the model (art.53(1)(a)) — exemptible under art.53(2) | BFInformation to downstream integrators (art.53(1)(b)) — exemptible under art.53(2) | BGCopyright compliance policy (art.53(1)(c)) | BHPublic summary of training data (art.53(1)(d)) | BISystemic risk evaluations & mitigation (art.55(1)(a)-(b)) | BJSerious incident notification to the AI Office (art.55(1)(c)) | BKAdequate cybersecurity protection of the model and its physical infrastructure (art.55(1)(d)) | BLCooperate with the Commission and national competent authorities (art.53(3)) | BMAppoint an EU authorised representative for the GPAI model (art.54) | BNImporter checks (art.23) | BODistributor checks (art.24) | BPData protection impact assessment — DPIA (art.35) | BQLegal basis identified & documented (art.6 / art.9(2)) | BRRecord of processing activities (art.30) | BSInformation to data subjects (art.13-14) | BTTransfer safeguards outside the EU/EEA (Ch. V) | BUWritten processor agreement with each processor (art.28(3)) | BVSecurity of processing — technical and organisational measures (art.32) | BWSafeguards for solely automated decisions (art.22) | BXBias-detection conditions documented (AI Act art.4a) | BY(a) Intended purpose as stated | BZ(b) Actual use at THE COMPANY | CADoes (b) differ from (a)? | CBSupply mode (built / bought / contractor / OSS) | CCVendor / provider | CDProvider / vendor establishment (art.22) | CEDate placed on the market / put into service | CFApplied sector (Annex III context) | CGProject phase / lifecycle stage | CHWithdrawal / retirement date | CIAI system type (organisation grouping) | CJIs it an AI system within the meaning of the AI Act? (art.3) | CKConnecting link to the EU (art.2)? | CLScope exemption (art.2(3)-(12))? | CMƒ▶ Does the AI Act apply? | CNJustification — art.3 (is it an AI system) [MANDATORY] | COJustification — art.2 (scope / exemption) | CPQ1 · What does THE COMPANY do with this tool? | CQQ2 · At go-live, whose name or trademark is on it? | CRQ2b · Who places it on the market / owns go-live? | CSQ2c · Written agreement placing the provider obligations on the Client? | CTQ3 · Is the supplier based outside Europe? | CUƒ▶ Our role (worked out from Q4) | CVRole correction — Compliance only, leave blank | CWart.25 — name on it, substantially modified, or purpose changed? | CXAlso DEPLOYER of this system? (art.3(4)) | CYJustification — role / art.25 | CZ[A] Prohibited practice — art.5(1)(a)-(h)? | DA[A] Prohibited practice — art.5(1)(ba)/(bb)? | DB[B] Annex I product — AI performs a SAFETY FUNCTION? | DC[B] Third-party conformity assessment required for HEALTH/SAFETY? (art.6(1)(b), 6(1c)) | DD[B] Machinery Regulation product? (Reg. 2023/1230) | DE[B] High-risk area — Annex III | DF[B] Secondary Annex III area (if any) | DGProfiling of natural persons? (art.6(3) override) | DHCould it materially influence a decision, in a way liable to harm a person? (art.6(3)) | DIƒ▶ Can the art.6(3) exemption be used? (worked out from Q7) | DJWhich art.6(3) condition? | DKWho established the art.6(3) qualification? | DLJustification — art.6(3) [MANDATORY if claimed] | DM[C] art.50(1) — direct interaction with a person? | DNart.50(1) — is it OBVIOUS to a reasonably well-informed person? (exception) | DO[C] art.50(2) — generates / manipulates synthetic content? | DPart.50(2) — assistive standard editing only? (exclusion) | DQart.50(2) — outputs marked machine-readable by the provider? | DR[C] art.50(3) — emotion recognition / biometric categorisation? | DSart.50(3) — workplace or education context? | DT[C] art.50(4) 1st ¶ — deep fake (image, audio or video)? | DUart.50(4) — evidently artistic, creative, satirical or fictional work? (limits disclosure) | DV[C] art.50(4) 2nd ¶ — text published to inform the public on matters of public interest? | DWart.50(4) — human review AND editorial responsibility held? (exception) | DX[D] Embeds / provides a GPAI model? | DYTHE COMPANY's role in relation to the GPAI model | DZGPAI model with systemic risk (art.51)? | EAGPAI model released under a free and open-source licence, with weights, architecture and usage information publicly available? (art.53(2)) | EBGPAI model placed on the market before 2 Aug. 2025? | ECPersonal data present? (GDPR art.4) | EDIs the responsible THE COMPANY entity established in the EU/EEA, and is the tool used as part of its activities? (GDPR art.3(1)) | EEDoes the tool process personal data about people located in the EU/EEA? (GDPR art.3(2)) | EFƒ▶ Does the GDPR apply? (worked out from Q10.2) | EGDoes the personal data leave the EU/EEA at any point — including a supplier, host or support team outside it? | EHWho has access to this data? | EIDoes a third party process this data on THE COMPANY's behalf? (GDPR art.28) | EJSensitive data present? (GDPR art.9) | EKSpecial-category data used SOLELY for bias detection? (art.4a) | ELAre THE COMPANY employees concerned? (art.26(7)) | EMSolely automated decision with legal / significant effect? (GDPR art.22) | ENFRIA trigger: public body / public service / creditworthiness / life-health insurance | EOAffected groups (art.27(1)(c)) | EPƒ▶ Is a DPIA needed? | EQƒDone or verified (count) | ERƒProblems to check | ESƒ▶ Deadline — high-risk requirements | ETƒ▶ Deadline — transparency | EUƒ▶ Deadline — AI model obligations | EVƒWhy it classified this way (auto) | EWOther notes for Compliance | EXDate last reviewed | EYValidated by (reviewer, role) | EZValidation date | FAEvidence index (link to document folder) | HNDPIA element 1 — systematic and extensive evaluation (GDPR art.35(3)(a)) | HODPIA element 2 — based on automated processing (GDPR art.35(3)(a)) | HPDPIA element 3 — decisions based on the evaluation (GDPR art.35(3)(a)) | HQDPIA element 4 — legal or similarly significant effect (GDPR art.35(3)(a)) | HRAnnex III listed use case (art.6(2)) | HSDoes the processing target those people — offering them goods/services, or monitoring their behaviour — in the EU/EEA? (GDPR art.3(2) targeting) | HTProvider’s high-risk system relies on third-party AI inputs (art.25(4)) |
| — | Flags signs of tiredness or agitation in maintenance crews before a night shift. | Infers an emotional state from the faces of staff in the depot rest area and raises a supervisor alert. | — | Yes — An AI system, with an art.2 connecting factor to the EU, and no exemption claimed. · PROHIBITED (unacceptable risk) — An art.5(1)(a)-(h) prohibited practice is declared. The system may not be placed on the market, put into service or used — this is not a heavier compliance burden, it is a bar. | — | — | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| — | Ranks feeders for controlled disconnection when a substation approaches its thermal limit. | Sold to distribution-network operators and run inside their control rooms; the operator confirms each disconnection. | — | Yes — An AI system, with an art.2 connecting factor to the EU, and no exemption claimed. · No — materially influences a decision — The system materially influences the outcome of a decision, so it cannot be said to pose no significant risk. · High risk (Annex III) — Falls within an Annex III area and the art.6(3) exemption is unavailable: high-risk under art.6(2). · NOT ESTABLISHED — this register holds no answer to Q4.7, so it states no conclusion for the duties those facts decide. Any count in this row is of the duties established SO FAR, not of the duties this system owes. · THE 0 IN FC, FD, FE, FF, FG, FH, FR, FZ, GC, GD, GE, GF, GG, GH, GI, GJ, GK, GL, GM, GN, GO, GP, GQ, GR, GS, GT, GU, GV, GW, GX, GY, GZ, HA, HB, HC, HD, HE, HF, HG, HH, HI, HJ IS NOT A FINDING — those 42 helper flags read 0 because the condition could not be decided, not because the duty was ruled out. The flags are 1/0 by the workbook's own formulas and SUM(FB:HJ) must stay equal to J, so they cannot carry a third value; this sentence is where the distinction is recorded. Every other 0 in FB..HJ IS a finding. | — | — | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| — | Re-reads marked scaffolding and lifting-safety test papers and reports scoring or transfer errors to the instructor. | Runs after the instructor has marked and signed the paper; the instructor keeps the mark and decides on any correction. | — | Yes — An AI system, with an art.2 connecting factor to the EU, and no exemption claimed. · Yes — One of the art.6(3) conditions is met and neither disqualifier applies, so the system is not high-risk despite falling in an Annex III area. The reasoning must be documented and the system still registered. · Not high-risk (Annex III exemption) — Falls in an Annex III area but meets an art.6(3) condition without profiling or materially influencing a decision. The system is NOT high-risk — but the assessment must be documented and the system still registered under art.49(2). | — | — | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| — | Answers questions about construction and pressure-equipment standards and drafts clause commentary. | Trained by the group on public standards and its own method notes, then licensed to clients as a model with an API. | — | Yes — An AI system, with an art.2 connecting factor to the EU, and no exemption claimed. · Limited risk (transparency) — Not high-risk, but art.50 transparency duties apply: people must be told they are dealing with AI, or that content was generated by it. | — | — | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| — | Produces short dramatised near-miss films for site inductions, with synthetic presenters and voices. | Delivered to clients as part of the induction pack, under the group brand, on the group licence. | — | Yes — An AI system, with an art.2 connecting factor to the EU, and no exemption claimed. · Limited risk (transparency) — Not high-risk, but art.50 transparency duties apply: people must be told they are dealing with AI, or that content was generated by it. | — | — | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| — | Forecasts consumption of pumps, seals and filters per maintenance contract. | Handed on to facility clients with the supplier’s trademark and licence untouched, and run by the group on its own depots as well. | — | Yes — An AI system, with an art.2 connecting factor to the EU, and no exemption claimed. · Minimal risk — In scope, not prohibited, not high-risk, and no art.50 transparency trigger. Voluntary codes of conduct apply; nothing mandatory follows from the risk level alone. | — | — | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ⚠ Emotion recognition at work but art.5 not ticked. ⚠ Actual use diverges from the stated purpose — art.25(1)(c). | Warns a shift lead when an operator appears distracted or drowsy at a supervisory console. | Runs continuously on the console camera during shifts, logs alerts against the operator on duty, and the monthly alert count is read out at shift-performance reviews. | — | Yes — An AI system, with an art.2 connecting factor to the EU, and no exemption claimed. · Limited risk (transparency) — Not high-risk, but art.50 transparency duties apply: people must be told they are dealing with AI, or that content was generated by it. | — | — | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| — | Predicts human-robot approach and commands a protective stop inside a palletising cell. | Sold as a safety component to machine builders, who integrate it and CE-mark the completed machinery. | — | Yes — An AI system, with an art.2 connecting factor to the EU, and no exemption claimed. · Annex I Section B — Machinery route (art.2(2)) — A safety component of a product covered by the Machinery Regulation. art.2(2) routes it largely out of the AI Act's high-risk regime and into the sectoral one — a carve-out, not a clean exit, and one a lawyer should confirm. | — | — | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| — | Approximates wind-load simulations for a joint research programme on lattice-tower geometry. | Used only inside the research programme; no result is used to size or certify a structure in service. | — | No — exempt (art.2) — An art.2(3)-(12) exemption is claimed, which takes the system outside the Regulation entirely. · Outside AI Act scope — The AI Act does not apply, so no risk level arises under it. Other law may still apply. | — | — | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
One page per system
- AIS-101 Depot rest-area fatigue and mood camera (pilot)
- AIS-102 Substation load-shedding advisor
- AIS-103 Safety-training marking cross-check
- AIS-104 Technical-standards language model (licensed to clients)
- AIS-105 Site-safety scenario video studio
- AIS-106 Spare-parts demand forecasting, passed through to clients
- AIS-107 Control-room operator attention monitor
- AIS-108 Robot-cell proximity braking controller
- AIS-109 Aerodynamic surrogate solver (research programme)
The register v11 column model on nine invented systems. Fictional data — they belong to nobody; no account, nothing stored.