How do I prove non-high-risk Annex III assessment documented?

Record the field art6_assessment in the decision or governance record and make sure it is present and not empty. sebbi.pro checks it and issues a tamper-evident receipt.

Checks / EU AI Act / non-high-risk Annex III assessment documented

EU AI Act · Art.6(4)

EU AI Act Art.6(4) - non-high-risk Annex III assessment documented

Q: What does EU AI Act Art.6(4) - non-high-risk Annex III assessment documented require?

It asks you to show: non-high-risk Annex III assessment documented. The EU's law on artificial intelligence. High-risk systems must manage risk, keep logs, be transparent and stay under human oversight.

This control asks you to show: non-high-risk Annex III assessment documented. The EU's law on artificial intelligence. High-risk systems must manage risk, keep logs, be transparent and stay under human oversight.

What the law says: EU AI Act, Regulation (EU) 2024/1689 (official text) · Article 6 in plain English · Related hidden duties · Law graph (machine-readable)

What evidence passes

The check reads the field art6_assessment in the decision or governance record. It passes when that field is present and not empty. Anything else fails, with the reason stated.

Check it now

Value of art6_assessment

Free to run and see live. The sealed certificate comes with the sebbi engine, 50p a month.

Run it from your AI assistant

Connect https://sebbi.pro/mcp to Claude, ChatGPT, Cursor or any MCP app, then call:

sebbi_run_check {"check": "sebbi_euaiact_045", "record": {"art6_assessment": "..."}}

Or run every EU AI Act control at once with sebbi_run_framework. How to connect

One piece of evidence, 27 more controls

This control is part of Manage the risks. 27 other controls across 13 laws ask for the same thing: AI liability and damagesAgent output: compliance gatesDORAEN 18286:2026 (AI Act QMS)EU AI ActFCA (UK)HIPAAISO/IEC 27001Model risk (SR 11-7)NIS2NIST AI RMFSOC 2US state AI laws

Prove it once for all of them

If it fails: how to fix it

Put in place: Keep a risk register for each system: the risks, what reduces them and what is left.

Record it: the field art6_assessment, which passes when it is present and not empty.

{
 "record": {
  "art6_assessment": "link or reference to your evidence"
 }
}

Policy wording you can use:

[your organisation] identifies and assesses the risks posed by each AI system, records the measures taken to reduce them, and documents the remaining risk and who accepted it.

Keep it, hand it over, ask for it

My compliance file Ask a supplier to prove this