EU AI Act readiness

December 2026 is a date.
Know where you stand.

Readiness is not a policy PDF. It is being able to show, on any given day, which AI tools you run, who runs them, and what your controls do. Here is the short checklist, and where Northbeams fits each step.

Start your First Sweep free Book a demo
Browser · Desktop · CLI · MCP · Network
The framing

You cannot plan for a deadline you cannot measure.

Every readiness conversation starts in the same place: nobody has a current, honest list of the AI in use. Get that first. The rest of the checklist is straightforward once the inventory is real.

The readiness checklist

Four things to have in hand.

Walk these in order. Each one is a step Northbeams can evidence.

1. Inventory your AI
A current list of every AI tool in use across browser, desktop, CLI, and MCP, sorted sanctioned, unknown, or high-risk. Not a survey. The First Sweep returns it within 24 hours.
2. Attribute the usage
Tie each tool to a person, a model, and a time. This is the record of use that Article 4 literacy and Article 26 oversight both lean on.
3. Set your policies
Decide what is allowed, and for whom. Write it in plain language, simulate it, then enforce. "Block PII everywhere except HR" is one rule, not a project.
4. Keep signed evidence
Every event on one immutable, signed log. The Manifest exports it mapped to the obligations, gathered daily rather than reconstructed the week before.
27
active AI tools in a typical 50-person company
80%
of employees use AI without IT approval (Microsoft, 2024)
24 hrs
from one install to your first full sweep
What good looks like

Evidence gathered daily, not the week before.

The teams that will not scramble in December 2026 are the ones collecting the record now. Northbeams runs on the laptop, so the inventory is live from day one.

  • First full sweep back within 24 hours, no proxy or network change
  • Per-user attribution across all four surfaces plus the DNS layer
  • Immutable signed logs, unlimited history, 7-year retention on Enterprise
  • One export mapped to the obligations, for you or your auditor
A general checklist, not legal advice. Your counsel scopes exactly what the Act requires of you. Northbeams is a tool, not an AI provider, and the evidence pack is part of your evidence library, not a conformity assessment or a legal opinion. For the deeper walk-through, read the EU AI Act overview and the guide in Northbeams University.

See where you stand today.

The First Sweep is free and back within 24 hours. Then you plan from facts.

Start your First Sweep free Book a demo