• Home — overview, quick navigation, and key entry points
• Toolkit Packs — starter pack, vendor pack, sector packs, templates, and checklists
• Use Cases — realistic AI governance and compliance-readiness scenarios
• Resources — FAQ, decision tree, glossary, guides, and official source links
• Maintainer — Artem Nazarko, background, credentials, and project philosophy
• Community — contribution, governance, code of conduct, security, and support

The quiz engine provides fully typed readiness assessment scoring logic for AI governance assessments.

Location: .github/tools/quiz-engine/

Supports programmatic scoring, validation, and tool integration. See .github/tools/quiz-engine/README.md for implementation details.

Optional evidence pack database structure for tracking AI systems, risk screenings, vendors, and incidents.

Location: .github/project/database/

Use this schema if you want to manage toolkit data in a structured database. Supports queries for audit trails, compliance documentation, and risk management workflows. See .github/project/database/README.md for schema documentation.

Machine-readable toolkit resource inventory, official EU sources, and use-case scenarios.

Location: .github/tools/data/

Includes toolkit registry, official EU AI Act sources, and compliance readiness use cases. Useful for automation, site generation, and tool integration. See .github/tools/data/README.md for details.

Validation schemas for AI system inventory, risk screening, and vendor assessment data.

Location: .github/tools/schemas/

Use these schemas to validate structured data, integrate with third-party tools, or build custom automation. See .github/tools/schemas/README.md for schema details and examples.

This project publishes a lightweight container image for running the static site locally:

docker run --rm -p 8080:8080 ghcr.io/artemhobotun/eu-ai-act-toolkit-site:latest

Then open:

http://localhost:8080

The image serves the static GitHub Pages site through nginx. See docs/packages.md for details.

1. Inventory the AI tools and features you use.
2. Decide whether you are mainly a provider, deployer, or both.
3. Screen each use case for sensitivity and likely obligations.
4. Capture vendor answers before buying or expanding a tool.
5. Publish a simple internal AI use policy.
6. Train staff on approved use, human review, and incident reporting.
7. Review the register and templates on a regular cadence.
8. Follow the small-company guide: docs/guide/12-how-to-use-this-toolkit-in-a-small-company.md
9. Keep an evidence pack index: docs/guide/13-evidence-pack-index.md

Use the templates as a practical starting point, then adapt them to your sector, product, and internal processes.

• AI system inventory
• AI system profile
• AI use policy
• AI risk screening form
• Vendor AI questionnaire
• AI incident log
• Employee AI literacy record

• SME AI Act readiness checklist
• AI tool procurement checklist
• Internal AI use checklist

• Vendor pack overview
• Vendor questionnaire
• Vendor red flags checklist
• Vendor comparison matrix
• Vendor decision record
• Vendor document request email

• Start here
• Starter pack overview
• 30-minute self-assessment
• One-page executive checklist
• Management briefing template

Build the ZIP locally:

./.github/tools/scripts/build-starter-pack.sh

The generated ZIP is for internal use. Completed documents should not be uploaded to public GitHub issues.

The screening form helps identify whether a use case deserves deeper review. It asks about people-affecting decisions, personal data, sensitive sectors, biometric or sensitive use, human oversight, and vendor training on customer data.

For the full guide, see docs/guide/05-basic-risk-screening.md.

• SMEs and startups adopting AI tools
• founders and operations leads
• product, security, privacy, and compliance teams in small organizations
• consultants supporting small businesses with AI readiness work

• Sector Packs overview
• Internal productivity and generative AI
• Customer support chatbots
• HR and recruitment
• Marketing and sales
• Vendor procurement and SaaS
• Legal and document review

• Internal ChatGPT use
• Customer support chatbot
• HR candidate screening
• Marketing content generation
• Vendor AI tool procurement
• AI-enabled CRM scoring
• Document review assistant

• Sample evidence pack

This toolkit should be reviewed regularly because EU AI Act implementation guidance, standards, and enforcement practice may change over time.

• Official source register: docs/guide/14-official-source-register.md
• Versioning and maintenance policy: docs/guide/15-versioning-and-maintenance-policy.md
• Legal review escalation guide: docs/guide/16-what-to-escalate-for-legal-review.md
• Downloadable toolkit pack: docs/guide/17-downloadable-toolkit-pack.md
• Glossary: docs/guide/18-glossary.md
• SME decision tree: docs/guide/19-sme-decision-tree.md
• SME implementation playbook: docs/guide/20-sme-implementation-playbook.md
• Common mistakes: docs/guide/21-common-mistakes.md
• Frequently asked questions: docs/guide/faq.md
• Maintainer content style guide: docs/guide/22-maintainer-content-style-guide.md
• Source notes: docs/guide/10-source-notes.md
• Maintenance process: docs/guide/11-maintenance-and-review-process.md

This toolkit is based on Regulation (EU) 2024/1689 and keeps the guidance intentionally practical and conservative.

Run local quality checks:

./.github/tools/scripts/check-toolkit-quality.sh
./.github/tools/scripts/check-common-links.sh

See also: roadmap

Community resources are maintained outside the main README body to keep the project front page focused.

• Community page: docs/community.html
• Contribution guide: .github/CONTRIBUTING.md
• Code of conduct: .github/CODE_OF_CONDUCT.md
• Security and privacy reporting: Security policy
• Support: .github/SUPPORT.md
• Governance: .github/project/governance.md
• Maintainers: .github/project/maintainers.md
• License: LICENSE
• License notes: .github/project/license-notes.md
• Changelog: .github/project/CHANGELOG.md

Contributors are listed in .github/CONTRIBUTING.md and .github/project/maintainers.md.

README.md
LICENSE
CITATION.cff
.github/          contributing, workflows, Node toolchain
docs/             Pages site, disclaimer, project notes (includes database SQL)
.github/tools/    quiz TypeScript, dev config, docker, YAML data + JSON Schemas, Python tools, shell scripts
toolkit/