How we check
What the tools are checked against, how they are built, and what they are not. So you can judge a free tool on what stands behind it.
They are structured self-assessments built on cited primary sources, so every result can be traced back to the text it came from.
A free tool is worth exactly what stands behind it, so this page sets that out plainly. It says what the tools check against, how their logic was built, how often it is reviewed, and where the line is. The primary sources are listed in full at the foot of the page.
What do the tools check against?
The EU AI Act tool and the EU AI Act guides are checked against the primary legislation: Regulation (EU) 2024/1689, the Artificial Intelligence Act, as amended by Regulation (EU) 2026/1744, the Digital Omnibus on AI, which entered into force on 27 July 2026. Every regulatory claim on the site carries its article or clause so you can check it against that text.
The ISO 42001 material is checked against the ISO standard pages and UK accreditation guidance, and the AI policy material against named UK-primary sources such as the NCSC and the GOV.UK AI Playbook. We use clause numbers and names for ISO/IEC 42001 and do not reproduce its copyrighted text.
How are the tools built, and who reviewed them?
The tools are informational aids built on the cited primary sources. Each question and each result maps to an article, clause or named source, and the logic is a transparent reading of that text rather than a black box. We show our working, which is why every guide carries its citations inline and links here.
To be straight about it: the tools are not legal advice, and no individual is named as their legal reviewer. They are a structured way to read the primary sources for your situation, and they are built to be checkable against those sources, not to stand in for a lawyer or an auditor.
How often is this checked?
The regulatory content is checked against the amended primary text, and it is re-checked when the law changes. The Digital Omnibus is the most recent change we have folded in, including the two prohibited practices added to Article 5 that apply from 2 December 2026 and the amended AI literacy duty under Article 4.
A change to the EU AI Act, to the ISO standards, or to UK data protection law is what triggers a re-check. Where a page carries an editorial review date it is a real review date, and where it does not, none is claimed.
What are the tools not?
A result is based on the answers you give and the primary sources behind them, so it is not a substitute for advice on your own situation. Nothing here creates a lawyer-client relationship.
And we are not a certification body. A readiness result is not certification, not an audit, and not a statement that you would pass one. Certification to ISO/IEC 42001 is a decision only an independent, accredited certification body can make, as the certification guide explains.