Templates
EU AI Act templates
Summary
32 free EU AI Act templates in XLSX and DOCX (8 registers, 3 checklists, 3 assessments, 3 policies, 6 procedures, 7 kits and 2 crosswalks), generated from 107 recorded duties and rebuilt when those records change. Every row that cites a duty links to the record and its official source.
-
Register XLSX and DOCX EU AI ActISO/IEC 42001NIST AI RMFAI System Inventory
One row per AI system: purpose, role under the law, jurisdictions, risk tier, data, owner and review dates, with the recorded duties for each role on a reference sheet.
-
Register XLSX NIST AI RMFISO/IEC 42001EU AI ActAI Risk Register (MIT AI Risk Repository taxonomy)
A risk register whose domain and subdomain dropdowns are the MIT AI Risk Repository taxonomy, with inherent and residual scoring, control lookup and colour-coded thresholds.
-
Checklist XLSX EU AI ActEU AI Act Role and Risk Classifier
Answer six questions per system and the sheet returns the role, the risk tier and the date its duties apply, looked up from the dated milestones on the EU AI Act record.
-
Assessment DOCX and XLSX EU AI ActFundamental Rights Impact Assessment (FRIA)
The assessment Article 27 of the EU AI Act requires of deployers of high-risk AI: one section per element the article names, with placeholders, plus a register to track completed assessments.
-
Policy DOCX EU AI ActISO/IEC 42001AI Acceptable Use Policy
A policy for staff use of AI tools: permitted and prohibited uses, data handling, disclosure and reporting, with the prohibited practices drawn from the law.
-
Policy DOCX and XLSX ISO/IEC 42001NIST AI RMFEU AI ActAI Governance Policy and RACI
The governance policy an AI management system needs, built from the recorded governance duties, with a RACI matrix over every recorded control.
-
Checklist XLSX and DOCX EU AI ActISO/IEC 42001NIST AI RMFAI Vendor Due-Diligence Questionnaire
Questions to put to an AI vendor, grouped by governance, data, model, security, transparency, incidents, and insurance and indemnity, scored automatically.
-
Procedure DOCX and XLSX EU AI ActColorado ADMT law (SB 26-189)Human Oversight Procedure
A procedure for the humans who oversee an AI system: what they must be able to do, when they intervene, how an override is recorded, drawn from every recorded oversight duty.
-
Procedure DOCX and XLSX EU AI ActNIST AI RMFAI Incident Response Playbook and Log
Detect, contain, report and learn: a playbook built from the recorded incident-handling duties, with the reporting deadlines they set, and a log that computes them.
-
Register XLSX and DOCX EU AI ActNIST AI RMFAI Agent Registry and Permission Matrix
A register for agents that act — with tools, credentials and autonomy — and a permission matrix stating what each may do alone, with approval, or never.
-
Kit DOCX and XLSX EU AI ActEU AI Act Article 50 Transparency Kit
Notice texts and a checklist for the transparency duties of Article 50: chatbot disclosure, synthetic content marking, deepfake and emotion-recognition notices, with the application date from the record.
-
Crosswalk XLSX NIST AI RMFEU AI ActISO/IEC 42001NIST AI RMF ↔ EU AI Act ↔ ISO/IEC 42001 Crosswalk
Every recorded legal duty against the NIST AI RMF and ISO/IEC 42001 references it maps to, with the confidence of each mapping, so what is done for one counts for the others.
-
Kit DOCX and XLSX EU AI ActISO/IEC 42001AI System Technical Documentation
The technical file a high-risk system needs: one section per element the recorded documentation duties name, with placeholders, plus a document register.
-
Crosswalk XLSX EU AI ActColorado ADMT law (SB 26-189)Global AI Regulatory Applicability Matrix
Every binding AI instrument on record, by jurisdiction, with status, application date, who it binds and the use cases it covers, as a matrix to mark which apply to you.
-
Kit DOCX and XLSX EU AI ActISO/IEC 42001NIST AI RMFAI Model Card
A model or system card: intended use, out-of-scope uses, data, evaluation results by group, risks, oversight and monitoring, with the documentation and transparency duties it helps evidence.
-
Register XLSX and DOCX EU AI ActISO/IEC 42001AI Data Governance Register
One row per dataset that trains, tests or feeds an AI system: provenance, personal data, lawful basis or licence, bias checks and retention, with a procedure and the data duties on record.
-
Register XLSX ISO/IEC 42001NIST AI RMFEU AI ActAI Audit Evidence Tracker
Every piece of evidence the recorded controls expect, one row each, with owner, status, location and review date, so an audit or certification starts from a complete list.
-
Procedure XLSX and DOCX EU AI ActAI Literacy and Training Plan
A role-based AI literacy plan: who needs which level of training, in what format, by when, with a coverage formula and the literacy and oversight duties on record.
-
Procedure DOCX and XLSX EU AI ActISO/IEC 42001AI Post-Market Monitoring Plan
How a deployed AI system is watched after release: metrics, thresholds, frequency, owners and escalation to incident response, with the monitoring and incident duties on record.
-
Policy DOCX and XLSX EU AI ActAI Contract Clause Library
Nine contract clauses for buying or supplying AI: documentation, data use, testing, incidents, changes, oversight, audit and the allocation of regulatory roles, each tied to the duty it allocates.
-
Assessment XLSX and DOCX EU AI ActNIST AI RMFAI Red-Team and Evaluation Test Plan
A test plan and case log for adversarial and evaluation testing: accuracy, robustness, prompt injection, bias, harmful content, privacy leakage and misuse, with severity and retest tracking.
-
Checklist XLSX and DOCX EU AI ActEU AI Act High-Risk Deployer Compliance Pack
For organisations using a high-risk AI system: every recorded EU AI Act deployer duty as a per-system checklist, a log of notices to workers and affected people, notice templates and the dates that apply.
-
Procedure XLSX and DOCX EU AI ActISO/IEC 42001NIST AI RMFAI Use-Case Intake and Triage Form
Register and screen every proposed AI use before work starts: an intake register, a screen against every prohibited practice on record, and routing to standard, enhanced or transparency review.
-
Kit XLSX and DOCX EU AI ActGeneral-Purpose AI Model Provider Compliance Kit
For providers of general-purpose AI models: every recorded GPAI provider duty as a checklist, the information pack for downstream providers, a training-content summary worksheet and the systemic-risk sections.
-
Kit XLSX and DOCX EU AI ActISO/IEC 42001EU AI Act Conformity Assessment and QMS Workbook
For providers of high-risk AI systems: each recorded requirement mapped to the evidence that meets it, the thirteen quality management elements, a re-assessment trigger log and a draft declaration of conformity.
-
Assessment DOCX and XLSX EU AI ActAI Supplement to a Data Protection Impact Assessment
Fifteen AI-specific questions to add to a DPIA (inferences, training on personal data, accuracy across groups, automated decisions, model attacks, suppliers), with the privacy and impact-assessment duties on record.
-
Kit DOCX and XLSX EU AI ActColorado ADMT law (SB 26-189)AI Decision Explanation and Appeal Kit
When AI makes or supports a decision about a person: an adverse decision notice, an explanation reply, a human review procedure and a request log that counts days to answer, with every duty on record that asks for them.
-
Register XLSX and DOCX EU AI ActISO/IEC 42001AI Change Log and Substantial Modification Test
Every release of an AI system after it is in use, with a built-in test that flags a possible substantial modification, the decision and its approver, and the duties a change gate serves.
-
Kit DOCX and XLSX EU AI ActFrontier AI Safety Framework and Transparency Report
For developers of the most capable models: an outline of a published safety framework and a model transparency report, a capability-threshold sheet, a safety incident log and the frontier-model duties on record.
-
Register XLSX and DOCX EU AI ActAI Regulatory Horizon Scan
Twelve months of recorded AI policy changes with columns to rate relevance and assign actions, every upcoming deadline, and a quarterly briefing outline. Rebuilt whenever a change is recorded.
-
Register XLSX and DOCX EU AI ActPublic-Sector AI Use-Case Inventory
For government agencies: an AI use-case inventory in the shape public-sector rules ask for, flagging rights- and safety-affecting uses, with a procedure and every recorded duty that names public authorities.
-
Procedure XLSX and DOCX EU AI ActSynthetic Content Labelling and Provenance Plan
One labelling design for AI-generated text, images, audio and video: per-feature visible labels and machine-readable marks, with every recorded duty to label, mark or disclose synthetic content.
Frequently asked questions
Are these EU AI Act templates free?
Yes. Each template page has a short form: enter your name, company and work email and the download links arrive by email, valid for 7 days. Licensed CC BY 4.0. You may use, adapt and share this template, including commercially, with attribution to aipolicytracker.org.
Where should I start?
With AI System Inventory and AI Risk Register (MIT AI Risk Repository taxonomy). They establish which systems and duties are in scope; the other templates then cover individual duties.
Do they make us compliant?
No. They are informational resources, not legal advice. They help you produce the evidence a regulator, customer or auditor asks for; whether a duty applies is a judgement they cannot make.
Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.