Template library
EU AI Act templates in Word and Excel
Free, editable, English and Dutch, checked against the law on 6 October 2026.
Editor: Zahed Ashkara, jurist, privacy and AI. Go to all 23 templates
Where to start
- 01
Map which AI your organisation uses or builds, and your role for each system.
AI register and classification - 02
Set out how your organisation handles AI and who decides.
AI policy - 03
Put in place the transparency that has applied since 2 August 2026 to chatbots, deepfakes and AI-generated text.
Article 50 kit
Packs
Several templates in one ZIP, with a readme. Each template also has its own page.
SME starter pack AI Act
- AI policy
- Acceptable AI use policy
- AI register and classification
- Article 50 kit
- Article 4 evidence dossier
Article 4 pack: AI literacy
- Article 4 evidence dossier
- Article 4 register
Article 50 pack: transparency
- Article 50 kit
- AI Act role determination
- Acceptable AI use policy
High-risk AI pack for deployers
- High-risk AI file (deployer)
- FRIA template
- DPIA for AI
- AI Act role determination
- AI incident response plan
HR AI evidence pack
- HR AI register and bias check
- HR AI classification note
- HR AI oversight playbook
- HR AI transparency notices
Pack for providers
- Provider pack
- AI Act role determination
- Prohibited practices screening
- AI incident response plan
Public sector AI pack
- AI procurement checklist, public sector
- FRIA template
- DPIA for AI
- AI register and classification
Copilot DPIA pack
- DPIA checklist for Microsoft 365 Copilot
- Copilot questionnaire for IT and the vendor
- Copilot DPIA text blocks
The agent dossier
- Agent register
- Board deck on AI agents
All templates (23)
23 of 23 templates
Word
AI policy
An AI policy is the document in which an organisation records how it develops, procures and uses AI systems: who decides, which uses are prohibited, how applications are classified and registered, and which obligations under the EU AI Ac...
Excel
AI register and classification
An AI register is an internal list of every AI system your organisation develops or uses.
Word
Article 50 kit
Article 50 of the EU AI Act sets transparency obligations for certain AI systems.
Word
Acceptable AI use policy
An AI acceptable use policy sets out which AI tools staff may use for work, which information may go into them and what staff do when publishing or when something goes wrong.
Word
AI governance framework
An AI governance framework sets out who in your organisation decides about AI, who carries out which obligation and how you demonstrate it.
Word
Quarterly AI and privacy report
A quarterly AI and privacy board report is a fixed one-page briefing in which the board sees each quarter which AI the organisation uses, which EU AI Act and GDPR obligations apply now, where the risks lie and which decisions are needed.
Word + Excel2 documents
Article 4 evidence dossier
An Article 4 evidence dossier shows which measures an organisation takes to support the AI literacy of its staff and others using AI on its behalf: for whom, why and when.
Excel
RACI matrix AI governance
A RACI matrix for AI governance records, for each obligation under the AI Act and the GDPR, who carries out the work (R), who is accountable (A), who is consulted beforehand (C) and who is informed afterwards (I).
Excel
Shadow AI scan
A shadow AI scan is a structured inventory of the AI tools staff use, including unapproved ones such as a chat assistant on a personal account or an AI feature switched on in existing software.
Excel
Prohibited practices screening
A prohibited AI practices screening checks whether an AI system falls under a prohibition in Article 5 of the EU AI Act, such as emotion recognition in the workplace or social scoring.
Word
AI Act role determination
Role determination under the AI Act means establishing, per AI system and per use, whether your organisation is the provider, deployer, importer, distributor or authorised representative (Article 3).
Word
High-risk AI file (deployer)
A high-risk AI file is the evidence file of the deployer, the organisation using an Annex III AI system under its own authority.
Word
Provider pack
Technical documentation under the EU AI Act is the file that the provider of a high-risk AI system draws up before placing it on the market or putting it into service (Article 11).
Word
FRIA template
A FRIA (fundamental rights impact assessment) is the assessment that Article 27 of the EU AI Act requires from certain deployers of high-risk AI: bodies governed by public law, private entities providing public services, and deployers of...
Word
DPIA for AI
A DPIA for AI is the data protection impact assessment that Article 35 GDPR requires when an AI application is likely to result in a high risk to people's rights.
Word
AI incident response plan
An AI incident response plan sets out how an organisation recognises, assesses, contains, notifies and evaluates incidents involving personal data, AI systems and network and information systems.
Word + Excel4 documents
HR AI evidence pack
The HR AI evidence pack bundles four templates with which an employer substantiates AI in recruitment, selection and workforce management under the AI Act and the GDPR: a classification note (prohibited practices, Annex III point 4 and A...
WordNew
AI vendor questionnaire
An AI vendor questionnaire is the set of questions a buyer sends an AI supplier before signing.
ExcelNew
EU AI Act checklist
An EU AI Act compliance checklist is an overview of the obligations under the AI Act (Regulation (EU) 2024/1689) that apply to your organisation.
WordNew
AI procurement checklist, public sector
An AI procurement checklist for public bodies is a working document that takes a municipality, ministry or agency through one AI purchase, from need to deployment.
WordNew
Legitimate interest assessment
A legitimate interest assessment (LIA) is the documented test a controller carries out before processing personal data on the basis of Article 6(1)(f) GDPR.
Word3 documentsNew
Copilot DPIA pack
The Copilot DPIA pack bundles three templates with which a municipality or other public body drafts the DPIA for Microsoft 365 Copilot along the advice of the Dutch Data Protection Authority (case 2025-018225): a checklist per DPIA part...
Excel + PowerPoint2 documentsNew
The agent dossier
The agent dossier brings together what you need to deploy AI agents safely and within the rules: a board deck on the risks, the rules and the first measures, and an agent register in Excel in which you record for each agent what it does,...
Prefer to work online, without a download
These tools are open and do not ask for an email address.
Templates for Governments
Specially developed templates for government organizations: AI intake forms, algorithm register helpers, executive proposals and more.
View government templatesFrequently asked questions
Are the templates free?
Yes. All templates are free and editable in Word or Excel. You only enter your business email; the download link arrives by email. Once you have confirmed your address, downloads on the same device start immediately. Each template has its own open page that explains what it contains and what it is for.
May I adapt and share the templates?
You may use, adapt and share this template freely, including within your organisation, provided the credit 'Source: Praxikon' with the link to this template stays in place.
How current are the templates?
Each template states the law as of 6 October 2026. They follow Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744. Article 50 has applied since 2 August 2026; the obligations for Annex III high-risk systems and the fundamental rights impact assessment under Article 27 apply from 2 December 2027, those for Annex I systems from 2 August 2028.
Does a template make me compliant?
Not by itself. A template helps you structure and record your work. Whether you meet the law depends on what you actually do: determine your role per system, classify, take measures and keep them up to date. A template is not legal advice.
Who writes the templates?
The templates are edited by Zahed Ashkara, jurist, privacy and AI. Each template states its legal basis, its version and the date on which it was checked against the law.
Do I need a DPIA or a FRIA?
It depends on the trigger. A DPIA follows from Article 35 GDPR when processing is likely to result in a high risk. A fundamental rights impact assessment follows from Article 27 of the AI Act, from 2 December 2027, for public bodies, private entities providing public services and deployers of AI for creditworthiness or life and health insurance. Often you need both; the DPIA template shows what you can reuse for the FRIA.
An empty template is not a file yet
The templates on this page are free to use. If you would rather not fill them in yourself, Praxikon does it: a signed assessment delivers a completed AI register with classification and role per system and a plan for the first 90 days. Training the people who will carry the record runs through LearnWize.
Signed assessment · From €495 · fixed price per item, excluding VAT · 1 to 4 weeks
Carried out by Zahed Ashkara, the legal adviser behind this explanation.