Make every AI system you deploy
a liability defensible.
Renomira inventories, classifies and documents your AI under Regulation (EU) 2024/1689 — and keeps the evidence on file for the day a regulator, customer or auditor asks.
4 minutes · no card · deterministic rules, not vibes or run the free exposure scan
3.Non-compliance with shall be subject to or, if the offender is an undertaking, up to for the preceding financial year,
What does your AI actually do?
Pick a use case to see the tier it falls into, the obligations that follow and the penalty you are exposed to. This is the same mapping the product runs over your whole estate.
How to read this
- Prohibited — banned outright since 2 Feb 2025. Nothing to document; the system must go.
- High risk — allowed, but only with documentation, oversight, logging and conformity assessment.
- Limited risk — disclose and mark. Cheap to fix, expensive to ignore.
- Minimal risk — no statutory duty beyond staff AI literacy.
Obligations that follow
Penalty exposure
Applies from
Indicative, not legal advice. Dates reflect the Digital Omnibus position as at October 2026 and may move before formal adoption.
Drag your revenue. Watch the ceiling move.
Maximum fines are the higher of a fixed sum or a share of worldwide turnover — except for SMEs and start-ups, which pay the lower of the two. Move the slider to see the number your board will ask about.
Penalty bands: Art. 99(3)–(5) of Regulation (EU) 2024/1689. Article 99(6) applies the lower amount to SMEs and start-ups.
Violation
We are an SME or start-up
Article 99(6): the lower of the fixed sum and the percentage applies
Maximum fine
of turnover
Territorial scope
Article 2 reaches further than your registered office. Drag the globe, or select a country for its reading.
- (a)Providers placing a system on the Union market
- (b)Deployers established in the Union
- (c)Third-country providers and deployers whose output is used in the Union
- (d)Importers and distributors
The Regulation applies across all 27 member states — and to providers abroad whose AI is used in the Union.
The interactive map needs JavaScript. The Regulation applies in all 27 EU member states and to third-country providers whose systems are placed on the Union market.
Some deadlines have already passed.
The AI Act applies in stages. Bans and AI literacy are already live; transparency lands on 2 August 2026; the Annex III high-risk duties were moved to December 2027 by the Digital Omnibus.
Next milestone
days
—
Three questions hit your inbox the week after 2 August.
The board, your biggest customer and your DPO are all asking the same thing — and right now the honest answer is “we don't know”.
Shadow AI everywhere
Unapproved Claude and ChatGPT accounts, CV screening bought by a hiring manager, meeting bots nobody told IT about. You cannot classify what you cannot see.
Buyer questionnaires
Enterprise deals now stall on “list every AI system, its risk tier and your oversight measures”. No register, no revenue.
The December 2027 cliff
The Digital Omnibus set a hard date for the Annex III high-risk duties. Fifteen months of runway — if you start now.
Inventory → Classify → Remediate → Prove.
A closed loop that stays alive: quarterly reviews, rule-pack updates and re-classification are one click, not a re-engagement.
Discover
Pull from a catalog of 120+ pre-mapped tools, add in-house systems, and run the anonymous shadow-AI survey.
+ ChatGPT Ent. · Productivity
+ HireVue · HR
survey: 14 disclosures
Classify
The engine maps every use case to Art. 5, Annex III and Art. 50 — and names the exact rule that fired.
EmotionAI → prohibited · Art. 5(1)(f)
HR Screenr → high · Annex III 4
DevAssist → minimal
Remediate
Obligations become a dated task list with owners — oversight, logging, FRIA, disclosures — scored to 100%.
Prove
One click: regulator-format AI register, gap report, AI use policy, Art. 4 literacy plan, FRIA, vendor questionnaires.
↓ ai-register.pdf
↓ gap-report.pdf
↓ ai-use-policy.pdf
A rule pack you can cite in an audit.
Consultants hand you a slide deck. Other tools give you a questionnaire. Renomira ships a versioned, deterministic rule pack: every classification names the exact article, the exact rule and the obligations that follow. When the Commission publishes new guidance — or the Omnibus text moves again — a new pack lands, and re-running your estate is one click.
- ✓Auditable rationale — “H1 — Employment & worker management [Annex III 4]” on every row, exportable.
- ✓Anonymous shadow-AI surveys — disclosure beats surveillance; findings flow straight into the register.
- ✓Deadline-aware tasks — every obligation gets a due date mapped to 2 Aug 2026 / 2 Dec 2027.
- ✓GPAI evidence vault — since Aug 2026, vendor model evidence is part of your register, not your inbox.
AI register
PDF · CSV · XLSX
Gap report
AI use policy
PDF · DOCX
Art. 4 literacy plan
PDF · DOCX
FRIA worksheet
PDF · DOCX
Vendor questionnaires
DOCX
Buyer questionnaire answers
DOCX
Incident register (Art. 26)
CSV
Oversight records (Art. 14)
CSV
ISO/IEC 42001 evidence pack
ZIP
Generated from the live register whenever something changes. PDF, CSV, XLSX and DOCX, in English and German.
A spreadsheet cannot keep the register alive. Neither can you.
Renomira replaces the three things mid-market teams currently fake their way through — with one loop that stays current when the law moves.
From “we don't know” to “here's the answer.”
“Our biggest customer's DPO sent a 40-question AI questionnaire. I had the full register, classifications and a DOCX answer draft in an afternoon — not €800/hr of a lawyer.”
Head of Information Security · German manufacturing, 240 people
“We ran the shadow-AI survey and found 14 unapproved AI tools in the first week. The register is now the thing I show the board — it keeps itself current.”
Data Protection Officer · SaaS scale-up, 60 people
“The rule-pack update re-ran our whole estate and flagged three use cases that moved tier. No spreadsheet would ever tell you the law moved.”
General Counsel · B2B SaaS, 320 people
Priced against the fine, not the hours.
Every plan includes the deterministic rule pack, the register and the exposure scan. Paid plans add exports, discovery and the API.
Free
See your exposure
€0 forever
- ✓Free AI Act exposure scan
- ✓Up to 3 AI tools in your register
- ✓Automatic risk classification
- ✓Readiness task list
SME
For 10–150 employees
€490 /month
- ✓Everything in Free
- ✓Up to 50 tools — full AI register
- ✓All document exports (register, policy, FRIA, literacy)
- ✓Shadow-AI surveys + discovery
- ✓Trust center & buyer questionnaire responder
- ✓API access (30 req/min)
- ✓Email support
Growth
For 150–500 employees
€990 /month
- ✓Everything in SME
- ✓Unlimited tools & workspaces
- ✓Rule-pack previews & re-classification wizard
- ✓ISO/IEC 42001 module + benchmarks
- ✓API 300 req/min + webhooks
- ✓Onboarding session
Annual billing available (two months free). Payments are handled by Razorpay — cards, UPI and international methods. See Refund & Cancellation and Terms & Conditions.
Find your gaps before a regulator does.
Twelve questions, no signup. You get an exposure score, your top exposures with the exact article references, and a PDF one-pager you can put in front of your board.
Straight answers
It inventories every AI tool your company uses — including shadow AI — classifies each use against the EU AI Act (prohibited, high-risk, limited or minimal), and generates the register, policies and gap reports that regulators and enterprise buyers ask for.
No. Renomira is compliance tooling with a deterministic, auditable rule pack. It makes your position provable and your workstreams planable — for legal judgement you still involve counsel, but you stop paying them €800/hour to build a spreadsheet.
Prohibitions, AI-literacy (Art. 4) and transparency (Art. 50) duties already apply, and enterprise buyers' questionnaires don't wait. The delay gives you 15 months to remediate the expensive things (oversight, logging, FRIA) calmly — starting with a register.
You answer 12 questions about how your company uses AI. The rule pack runs over your answers and returns an exposure score, your top exposures with exact article references, and a PDF one-pager. Free, no card, no signup.
The product is EU-hosted and GDPR-native: no trackers on this site, EU-friendly font CDN, and your register is yours — export everything, delete everything.
The deadline is fixed. Your exposure doesn't have to be.
Run the scan today, know your tier mix in four minutes, and walk into the next board meeting with an answer.
No spam. Unsubscribe anytime. GDPR-native, EU-hosted.
Get the 4-minute scan + the guides
Your exposure score, the exact articles that apply, and a board-ready one-pager — free, no card.
No spam. Unsubscribe anytime. GDPR-native.
Know your AI Act exposure
4 minutes · free · no card