⚑ Active Deadline Article 50 & GPAI obligations: 2 December 2026 — calculating... remaining Article 4 already in force
EU AI Act Bridge Series — Complete Pack

Your organisation is already
subject to the EU AI Act.
Most have no evidence of it.

Article 4 has been in force since February 2025. Article 50 and the GPAI supply chain obligations have a hard deadline of 2 December 2026. This pack gives DPOs, CIOs, Legal Leads, and Compliance Officers everything they need to build a demonstrable, auditor-ready compliance posture — before the window closes.

The evidence problem. The EU AI Act does not merely require compliance — it requires demonstrable compliance. A firm that has trained its staff on AI tools but holds no training records is, in regulatory terms, no better positioned than one that has not trained them at all. Evidence is structural, not asserted. This pack produces six specific evidence artefacts. Together, they are the compliance posture.

Get the Complete Pack — £97 → See what's included ↓

One-time purchase · Immediate download · Lifetime access · No subscription

6
Legal
Obligations Covered
2
Documents
in the Pack
36
Scored Assessment
Questions
£97
One-Time
Purchase
The Regulatory Position

The obligations are not
hypothetical. They are live.

Most organisations treat the EU AI Act as a future problem. It is not. Three deadlines are already active or approaching. A fourth and fifth follow in 2027 and 2028. The organisations that treat this as a future problem are currently accumulating unaddressed obligation windows — and the evidence gap grows with every month they delay.

2 February 2025
In Force Now
Article 4 — AI Literacy
Every organisation using an AI tool must hold per-person, per-system literacy training records. The obligation has been active for over a year. Most organisations have no compliant record.
2 December 2026
Active Deadline
Article 50 — Transparency Statement
Every organisation using generative AI must publish a formal transparency statement. The deadline is a hard obligation — organisations not compliant from 2 December are in breach from that date.
2 December 2026
Active Deadline
Arts. 25 & 53 — GPAI Obligations
Every organisation deploying GPT-4o, M365 Copilot, Gemini, or any LLM must verify provider compliance and maintain a supply chain governance record. This applies regardless of how the model is accessed.
2 December 2027
Upcoming
Annex III — High-Risk Classification
Full high-risk AI obligations for standalone systems. The classification assessment — covered in this pack — should be completed now, well before the deadline, to identify exposure.
2 August 2028
Upcoming
Arts. 9–15, 26, 27 — High-Risk
Full obligations for high-risk AI embedded in products. FRIA, incident notification, and human oversight requirements become mandatory for affected systems.
Your Position Today
Assessment Required
Where do you stand?
The self-assessment toolkit in this pack scores your organisation against all six obligations in under 45 minutes — and tells you exactly which registers to build first based on deadline urgency and gap severity.
What's in the Pack

Two documents. One complete posture.

The pack contains two separate, professionally formatted files. The e-book builds the analytical foundation — the legal obligations, the compliance gaps, and what each evidence artefact must contain. The toolkit converts that foundation into working documents your organisation completes, signs, and retains.

File 01 · PDF · 26 Pages

EU AI Act Compliance:
A 6-Obligation Build Guide

EBOOK-AIMS-EU-001 v1.0 · August 2026 · Next Review: February 2027

The analytical framework. Six chapters, each covering one legal obligation: the precise regulatory text, the compliance gap most organisations have, the specific evidence artefact that closes it, and the ISO/ITIL alignment. Interactive PDF with chapter navigation and clickable contents.

  • Ch.01 — AI Literacy (Art. 4): The per-person, per-system register that satisfies the obligation already in force
  • Ch.02 — Transparency (Art. 50): The six-section statement structure and the December 2026 deadline
  • Ch.03 — Classification (Annex III): The three-step screening that produces a defensible outcome for every AI system
  • Ch.04 — Fundamental Rights (Art. 27): The FRIA — when it is mandatory and what a non-trigger confirmation proves
  • Ch.05 — Incident Notification (Art. 26(5)): The 48-hour procedure: intake, classify, assess, notify, root cause
  • Ch.06 — GPAI Verification (Arts. 25 & 53): The nine-checkpoint supply chain record for every LLM provider
  • Closing — The unified governance calendar and what a complete evidence pack looks like
File 02 · HTML/PDF · Three Working Documents

EU AI Act Compliance
Self-Assessment Toolkit

TOOLKIT-AIMS-EU-001 v1.0 · Companion to EBOOK-AIMS-EU-001

The instrument layer. Three completeable working documents that turn the e-book's framework into a scored, signed, and retainable evidence record. Interactive in the browser. Print or save to PDF for your compliance file. Designed to be completed in a single session.

  • Doc.01 — 6-Obligation Checklist: 36 scored questions (Yes/Partial/No), real-time scoring, obligation-level progress bars, and a final verdict with specific remediation guidance
  • Doc.02 — Annex III Screening Worksheet: Worked example with three fictional AI systems classified in full — then a blank worksheet for your own systems with outcome dropdowns and rationale fields
  • Doc.03 — Annual Governance Calendar: Six-register review schedule with trigger conditions, responsible officer fields, status notes, and a four-position sign-off block
  • Designed to produce ISO/IEC 42001:2023 Cl. 9.1 and 9.3 compliant assessment and review records
  • Print-to-PDF function built in — completed documents are immediately filelable as compliance records
01
Self-Assessment Checklist
TOOLKIT-AIMS-EU-001-CL
Six obligations. Six questions each. 36 points maximum. Scores update in real time as you complete each response. Final verdict categorises your posture as Critical Risk, At Risk, Developing, or Audit Ready — with obligation-specific remediation guidance.
✓ Produces a documented self-assessment under ISO/IEC 42001:2023 Cl. 9.1
02
Annex III Classification Worksheet
TOOLKIT-AIMS-EU-001-AX
A complete worked example — three AI systems, all eight Annex III areas screened, full rationale per system, correct outcomes explained — followed by a blank worksheet for up to five of your own systems with outcome selectors and officer sign-off fields.
✓ Produces a responsible-officer-verified classification register entry
03
Annual Governance Calendar
TOOLKIT-AIMS-EU-001-GC
Review frequency, trigger conditions, responsible officer assignments, last-reviewed and next-review dates for all six registers — with additional notes field and a four-position sign-off block. Completed and signed, this is evidence of an active AI governance programme.
✓ Produces a management review record under ISO/IEC 42001:2023 Cl. 9.3
Regulation (EU) 2024/1689 ISO/IEC 42001:2023 ISO 9001:2015 ITIL 4 IEC 82079-1:2012 UK GDPR Art. 28 ISO/IEC Directives Part 2
Who This Is For

Built for the people accountable
for AI compliance

DPO / Compliance Officer
"I know we have obligations under the EU AI Act. I don't know if we're meeting any of them."
The self-assessment checklist gives you a scored gap analysis in under an hour. The governance calendar gives you the review structure to maintain the posture. Both documents are retainable as evidence of your assessment process.
CIO / AI Product Owner
"We're deploying AI tools faster than our governance can keep up. I need to know which ones carry regulatory exposure."
The Annex III classification worksheet takes every AI system your organisation deploys through the eight-area screening. A worked example shows you exactly how to document the rationale. The classification register is the foundation every other obligation depends on.
Legal Lead / General Counsel
"A client governance questionnaire asked us to describe our AI literacy programme. We had nothing to show."
Chapter 1 of the e-book covers exactly what Article 4 requires as evidence — not a policy, a per-person per-system training record with competency level, completion date, and responsible officer sign-off. The checklist shows you whether your current records satisfy the requirement.
Risk Manager / Board Secretary
"The board wants to know our EU AI Act exposure before December 2026. I need something to show them."
The self-assessment produces a scored posture report. The governance calendar shows the board that review cycles are in place. Both are designed to be signed by a named responsible officer — making them boardroom-ready compliance records, not internal working documents.
2 Dec 2026
Active Compliance Deadline

Two obligations with a hard 2 December 2026 deadline apply to every organisation using a large language model — regardless of sector, size, or whether any system is classified as high-risk. Both obligations require documented evidence, not policy intention.

  • Article 50 — Transparency Statement. A formal, published, signed, and versioned disclosure statement covering every generative AI use case. Without it, every AI-assisted output shared externally is a potential compliance event from 2 December.
  • Articles 25 & 53 — GPAI Verification. A per-provider, per-model supply chain record verifying that OpenAI, Microsoft, Google, and every other LLM provider your organisation uses has met their Article 53 obligations. This applies whether you use the API or the product interface.
  • Article 4 — AI Literacy. Already in force since 2 February 2025. Per-person, per-system training records are a current obligation. Every month without a compliant register is an additional unaddressed obligation window.
£97
One-time · Complete pack · Immediate download
Get the Pack Now →

6-Obligation Build Guide (PDF)
+ Self-Assessment Toolkit (HTML/PDF)

Get the Pack

Two access routes.
One complete pack.

Purchase the pack directly for £97 — one-time, no subscription. Or, if you're already a Governance Academy member, the pack is included in your membership and waiting for you inside Skool.

Purchase · One-Time · Immediate Download
£97
One-time payment · No subscription · VAT may apply
  • ✓ EBOOK-AIMS-EU-001 — EU AI Act Compliance: A 6-Obligation Build Guide (PDF, 26 pages, interactive navigation)
  • ✓ TOOLKIT-AIMS-EU-001-CL — 6-Obligation Self-Assessment Checklist (36 scored questions, real-time scoring, verdict with remediation guidance)
  • ✓ TOOLKIT-AIMS-EU-001-AX — Annex III Classification Screening Worksheet (worked example + blank worksheet for up to 5 systems)
  • ✓ TOOLKIT-AIMS-EU-001-GC — Annual Governance Calendar Template (completeable, sign-off ready, ISO 9.3 compliant)
  • ✓ Lifetime access · Updated when regulations materially change · Next scheduled review February 2027
  • ✓ Educational discount available for Governance Academy trial members — the £97 purchase price is credited against your first month's subscription if you join within 30 days
Purchase for £97 — Instant Download →

Secure checkout via ClickBank · Immediate download on payment confirmation · Educational content — all templates require professional review before operational use · Registered in England and Wales

🛡
60-DAY MONEY-BACK GUARANTEE
If you are not satisfied with your purchase for any reason, contact compliance@unuslondon.com within 60 days of your purchase date for a full refund — no questions asked.
Academy credit note. If you purchase this pack and subsequently join the Governance Academy within 30 days, contact compliance@unuslondon.com with your purchase reference and your first month's subscription will be reduced by £97.
Governance Academy Members · Included in Membership

Already a
Governance Academy
member?

This pack is included in your Governance Academy membership at no additional cost. Both files are available inside your Skool community now — no separate purchase required.

How to Access Inside Skool
  • 1. Log in to your Governance Academy community at skool.com
  • 2. Navigate to the EU AI Act Bridge Series classroom
  • 3. Open the Complete Pack — Downloads module
  • 4. Download both files: EBOOK-AIMS-EU-001 and TOOLKIT-AIMS-EU-001
Go to Governance Academy on Skool →

Not yet a member? Start your 7-day free trial →
Build all six registers — one module per month — for £97/month. The complete EU AI Act evidence pack, built in six months.

Frequently Asked Questions

Answered directly.

Does this pack apply to UK organisations, or only EU-regulated entities? +
The EU AI Act applies to any organisation that places AI systems on the EU market or whose AI system outputs affect persons in the EU — regardless of where the organisation is incorporated. UK organisations using AI tools that interact with EU-based clients, customers, or staff are within scope. Additionally, the transparency and literacy obligations in this pack align with emerging UK AI governance expectations and provide a defensible framework regardless of the precise jurisdictional analysis. This pack is produced for educational purposes; your specific jurisdictional position should be confirmed with qualified legal counsel.
We use M365 Copilot. Does that make us subject to the GPAI obligations? +
Yes. The GPAI obligations follow the model, not the product wrapper. An organisation using M365 Copilot is a deployer of the GPT-4 series model under EU AI Act Chapter V, even though it interacts with the model through a Microsoft product interface rather than directly via API. The deployer's obligation under Article 25 is to verify that Microsoft (as provider) has met their Article 53 documentation obligations, and to maintain a supply chain governance record. Chapter 6 of the e-book and the GPAI checkpoint framework in the toolkit cover this in full.
Does completing the toolkit make us EU AI Act compliant? +
No — and this is an important distinction. The toolkit produces evidence of a self-assessment and governance framework. Compliance requires building and maintaining the six operational registers described in the e-book: the literacy register, the transparency statement, the classification register, the FRIA, the incident procedure, and the GPAI supply chain register. This pack gives you the analytical framework and the assessment instruments. The Governance Academy provides the operational infrastructure — the Supabase schemas, n8n automation workflows, and build guides — to construct those registers. The toolkit is not a substitute for the registers; it is the map that shows you which registers to build and in what order.
We are a small organisation using one or two AI tools. Is this pack relevant? +
The obligations in this pack — particularly Articles 4 and 50, and the GPAI supply chain obligation — apply to every organisation using an AI tool, regardless of size or the number of systems deployed. A two-person firm using ChatGPT to draft client-facing content has an Article 50 transparency obligation from 2 December 2026. A ten-person firm whose staff use M365 Copilot has an Article 25 GPAI verification obligation. The pack is designed to be proportionate — the Annex III classification worksheet accommodates organisations with as few as one AI system, and the governance calendar scales to the scope of the organisation's actual AI portfolio.
What is the relationship between this pack and the Governance Academy membership? +
This pack is the analytical and assessment layer. It tells you what compliance looks like, scores your current position, and gives you the instruments to assess and document your governance posture. The Governance Academy is the build layer — it delivers the actual operational infrastructure: PostgreSQL database schemas, n8n automation workflows, HTML dashboards, and step-by-step build guides for each of the six registers the e-book describes. Pack buyers who join the Academy within 30 days receive a £97 credit against their first month's subscription. Academy members receive this pack as part of their membership at no additional cost.
Will the pack be updated when regulations change? +
Yes. The next scheduled review is February 2027, or earlier on any material EU AI Act regulatory update. The EU AI Act Simplification Regulation (Omnibus VII, adopted 29 June 2026) has already introduced targeted amendments — the current v1.0 documents reflect the regulatory position as of August 2026. Purchasers will be notified by email when a new version is published and will receive the updated files at no additional cost. Academy members receive updates automatically through the Skool platform.

Six obligations.
One complete pack.

The 2 December 2026 deadline does not move. The evidence your organisation needs to demonstrate compliance takes time to build. The pack that helps you understand what to build and where your gaps are costs £97 and downloads immediately.

Get the Complete Pack — £97 →

EBOOK-AIMS-EU-001 + TOOLKIT-AIMS-EU-001 · One-time · No subscription · Immediate download