Check AI systems for compliance with the EU AI Regulation (AI Act). Classify systems by risk categories, and document technical requirements and organizational measures in a structured and traceable manner – GDPR and AI Regulation compliance in one system. A dedicated register of all your AI systems with its own view stays linked to your GDPR documentation. The AI literacy your employees need under the AI Regulation is built with included online trainings in the same system.
AI Compliance
Conduct systematic compliance assessments for AI systems. The structured form guides you through the classification by risk categories (no risk, low-risk AI system, high-risk AI system, prohibited practices). You assess purpose, scope of use, affected persons, and potential risks.
AI TOMs
Define specific TOMs for AI systems – from bias prevention to explainability of decisions to monitoring system performance. Document technical requirements for data quality, transparency, human oversight, accuracy, and robustness.
Features
From risk classification to AI TOMs to revision – all the tools for AI compliance under the EU AI Act.
Systematic classification according to AI Act risk categories. Assessment of whether an AI system is to be classified as high-risk.
Holistic compliance assessment from GDPR and AI Act perspectives. Overview of all AI-supported processes.
All AI systems centrally in a filterable overview that brings together every data processing system with AI components. Risk category, status, and last review at a glance.
Upon approval, a new revision is automatically created. Reminders prompt you for reviews when system changes occur.
Export as PDF or DOCX with all assessments and measures. Professional layout for audits and evidence.
Maintain a dedicated register of all systems with AI components. In the data processing systems you get a separate “AI systems” view that links to your AI compliance assessments and AI TOMs.
Ready-to-use online trainings for users, decision-makers, and employees fulfill the AI literacy obligation under the AI Regulation – with automatic tracking and PDF certificates of participation directly in the software.
preeco’s AI functions are optional and disabled by default. The AI provider is freely selectable – OpenAI-compatible interface, self-hosting possible. Every AI activity is logged: function, person, model, status, duration, and token usage.
The AI Act does not stop at documentation. Article 87 declares the EU Whistleblower Directive (2019/1937) applicable to the reporting of infringements of the regulation and to the protection of reporting persons. This creates a case type in the reporting office that was not yet foreseen when many reporting channels were set up. This page covers the documentation side; the confidential and optionally anonymous reporting channel is provided by preeco | whistleblower. To see how both sides work together, visit the AI Act overview.
FAQ
In an AI compliance check, a structured form guides you through the classification by risk class: no risk, low-risk AI system, high-risk AI system or prohibited practices. You assess purpose, area of use, affected persons and potential risks, and document the reasons for your classification. You make the legal assessment yourself; preeco | data protection makes sure it is recorded completely and traceably.
You document AI systems as data processing systems with AI components. With the AI Regulation module you get a dedicated AI systems view there that brings all of these systems together. You link them to AI compliance checks, AI-specific technical and organizational measures and the processing activities in which they are used. This keeps your GDPR and AI Act documentation connected in one system.
AI TOMs are technical and organizational measures specifically for AI systems. Typical content covers measures to avoid bias, to make decisions explainable and to monitor system performance, as well as requirements for data quality, transparency, human oversight, accuracy and robustness. You link the measures to the systems and processing activities concerned and export them as PDF or DOCX.
Article 4 of the AI Act requires staff who work with AI systems to have a sufficient level of AI literacy. preeco | data protection includes ready-to-use online training for this: AI literacy for users, for decision-makers and for data protection, IT and compliance staff. You track progress per person, and a certificate of participation is issued as a PDF once the test has been passed.
The AI features in preeco are optional and switched off by default. You choose the AI provider yourself through an OpenAI-compatible interface, and a self-hosted model is also possible. Every AI activity is logged with function, user, model, status, duration and token usage. The AI produces drafts that your team reviews; the decision stays with the people responsible for the documentation.
Under Article 87 of the AI Act, the EU Whistleblower Directive applies to such reports and to the protection of the people who make them. preeco | data protection covers the documentation of your AI systems. The confidential and optionally anonymous reporting channel is provided by preeco | whistleblower, which runs on its own platform. Check whether your reporting office already provides for AI breaches as a case type.
We will show you how preeco | data protection simplifies your AI compliance management.