From free assessment to paperwork: the AI Act Risk Report, DPIA and bundle

You've probably already run our free applicability questionnaire — the one that walks through your actual AI and data use and tells you, in plain language, which EU AI Act and GDPR obligations apply to your business. That questionnaire is still free, and it stays that way. What's new is what you can do with the result once you have it. Until now, that assessment lived on your screen, useful for your own understanding but not something you could hand across a table. A bank underwriting a loan, an investor running due diligence, a client's procurement team, or your own auditor doesn't want a screen — they want a document. That's what today's launch is about: three new one-time purchases, no subscription, that turn the free report into paperwork.

What's new

AI Act Risk Classification Report — €49

This is a branded, citation-backed export of your free applicability report — the same underlying engine, the same result, but formatted as a document with the legal references attached, ready to attach to a bank's due diligence pack, an investor's questionnaire, or an auditor's file.

DPIA generator — €69

An LLM-drafted Data Protection Impact Assessment, structured to follow GDPR Article 35(7): a systematic description of the processing operation, an assessment of necessity and proportionality, an assessment of risk to the rights and freedoms of data subjects, and the measures put in place to address that risk. It's grounded in the Article 35(3) trigger criteria and the WP248 guidelines from the former Article 29 Working Party — profiling with a legal or similarly significant effect, large-scale processing of special-category data, systematic monitoring, processing that involves vulnerable data subjects, and innovative technology or high-risk AI use.

Full bundle — €99

The bundle covers both policy documents (an AI Usage Policy and a Privacy Policy), the risk report, the DPIA, and a new Evidence & Audit Pack cover sheet that indexes everything into a single package — useful when you need to hand an auditor, or the DPC if it comes to that, one complete file rather than four separate downloads.

When do you actually need a DPIA?

Not every processing activity needs a Data Protection Impact Assessment — GDPR only requires one where processing is likely to result in a high risk to the rights and freedoms of individuals. Under Article 35(3) and the WP248 guidance, that's generally the case where one or more of the following applies:

• Profiling or automated decision-making that produces a legal effect or similarly significantly affects someone — credit scoring, automated hiring decisions, and comparable use cases.
• Large-scale processing of special categories of personal data, such as health data, biometric data, or data revealing ethnic origin.
• Systematic monitoring of a publicly accessible area, including through CCTV or tracking technologies.
• Processing that involves vulnerable data subjects, including children, patients, or employees under close workplace monitoring.
• Use of innovative technology or high-risk AI systems where the consequences for individuals are not yet well understood.

If any of these apply to something your business actually does, a DPIA isn't a nice-to-have — it's a legal requirement under Article 35, and it's the kind of document the DPC will expect to see evidence of if it ever asks. That's exactly the gap the DPIA generator is built to close, starting from the answers you've already given in the free questionnaire rather than a blank page.

What the bundle actually saves

That's not a rounded-up marketing figure, it's just the arithmetic: €19 + €19 + €49 + €69 = €156 against €99 for the bundle, a difference of €57. For a business that's already going to need all four documents — most commonly because a bank, an investor, or a large client's procurement process is asking for them together — the bundle is the more sensible route almost every time.

As always, the starting point is the free questionnaire. None of these three products is worth much without an accurate picture of your actual AI and data processing first — if you've already got that picture, turning it into a document you can hand to someone else is now one purchase away.