FAQ
Everything you need to know about ClearAct and EU AI Act compliance.
The EU AI Act is the world's first comprehensive regulation for artificial intelligence. It establishes rules for AI systems based on their risk level — from minimal to unacceptable risk. Organizations deploying AI in the EU must comply by August 2, 2026 for high-risk systems.
Any organization that develops, deploys, or distributes AI systems within the European Union — regardless of where the company is headquartered. This includes both EU-based companies and international companies serving EU markets.
Non-compliance can result in fines up to €35 million or 7% of global annual turnover, whichever is higher. Beyond fines, non-compliant AI systems may be banned from the EU market entirely.
ClearAct guides you through the entire compliance process: inventory your AI systems, classify them by risk level using our guided wizard, generate required documentation with AI assistance, track compliance status on a dashboard, and export audit-ready PDF reports.
Yes. All data is encrypted in transit and at rest. We use Supabase (built on PostgreSQL) with row-level security policies ensuring complete tenant isolation. Your compliance documents are only accessible to your organization.
Absolutely! Every plan includes a 7-day free trial with full access to all features. No credit card required to start. You can also try our free 5-minute AI risk assessment to see if your systems are high-risk.
ClearAct generates five document types: (1) Risk Assessments — detailed evaluation of your AI system's risk profile and mitigation measures, (2) Technical Documentation — system architecture, data governance, and performance metrics required by the Act, (3) Transparency Notices — user-facing disclosures about AI system capabilities and limitations, (4) Conformity Declarations — formal declarations of conformity with EU AI Act requirements, and (5) Human Oversight Plans — procedures for human monitoring and intervention capabilities.
Most companies complete the full process — classification, document generation, and export — in under a day. The risk classification wizard takes about 5 minutes per system, and AI-powered document generation handles the heavy lifting. Larger organizations with many AI systems may take a few days.
You can override any AI-suggested risk classification with your own assessment. Simply select the risk level you believe is correct and provide a written justification. Your override and reasoning are documented for audit purposes.
No. The classification wizard guides you through plain-language questions about your AI system — no legal or technical expertise required. ClearAct translates your answers into the regulatory framework automatically.
Compliance with the EU AI Act is ongoing, not a one-time event. After the deadline, organizations must maintain up-to-date documentation, monitor their AI systems continuously, and report any significant changes. ClearAct helps you stay compliant over time with versioning and status tracking.
Yes. Organization owners can invite team members via email from the Team page. Each member gets their own login and can access the organization's AI systems and compliance documents. Owners can manage roles (admin/member) and remove team members.
ClearAct uses a template-based approach grounded in the EU AI Act's requirements, with AI filling in specifics based on your system details. Documents are structured to meet regulatory standards, but we always recommend having your legal team review generated documents before submission. Think of ClearAct as drafting 90% of the work — your experts handle the final review.
Yes, if your AI systems are used within the EU or produce outputs that affect EU residents. The EU AI Act has extraterritorial scope (Article 2), similar to GDPR. This applies to companies worldwide — not just those headquartered in the EU.
A provider develops or commissions an AI system and places it on the market under their name. A deployer uses an AI system under their authority. Both have obligations, but providers face stricter requirements (conformity assessment, technical documentation, etc.). If you build AI tools, you're a provider. If you use third-party AI tools, you're a deployer.
It depends on your AI system. Most high-risk systems under Annex III can use internal conformity assessment (self-assessment). However, certain biometric identification systems require third-party assessment by an accredited notified body. ClearAct generates the documentation you need for either path.
Yes. You can cancel from the Settings page at any time. Your access continues until the end of your current billing period. All your data remains available for export before account closure.
ClearAct supports 9 EU languages: English, German, French, Italian, Spanish, Dutch, Polish, Portuguese, and Swedish. Both the user interface and generated compliance documents are available in all supported languages.
Your data is stored in the United States via Supabase (PostgreSQL on AWS). All data is encrypted in transit (TLS) and at rest. We process data in accordance with GDPR and offer a Data Processing Agreement (DPA) with Standard Contractual Clauses for international transfers.
Still have questions? Use the chat widget or email us at contact@clearact.ai