Register your first AI system
Add an AI system, answer the guided questions — role, duties, model, prohibited practices, risk, transparency, GDPR — and get a classification with the exact obligations that apply.
Everything in Veritome hangs off an AI system. Before the EU AI Act applies to anything, you have to know what you have — so your first job is to build an inventory. Registration is the front door of the six-phase journey (Classify → Scope → Implement → Assess → Register → Monitor): it captures what the system is and who you are in the value chain, and hands those answers to the engine that decides what you must do.
Step by step
- Open AI systems and press Register AI system (the Dashboard header has the same button).
- The guided flow runs eight screens, then a review. Your draft autosaves to this browser, so you can close it and return without losing your answers.
- System — a recognisable name (CV-screening assistant) and one or two lines on what it does. This is the text the engine and Aria read back at the end, so make it descriptive.
- Role → Duties → Model → Prohibited → Risk → Transparency → GDPR — see Classify a system: the guided flow, screen by screen for each.
- Review — the engine's reading of your answers and the obligations it will generate. Tick the declaration and press Create. The system lands on the register, its obligations are generated, and its dossier opens with a sealed first entry.
Vendor, department, version and the system owner are set on the record afterwards; owners can also be set per obligation. To bring an inventory you already keep, Import CSV loads many systems at once, each classified from its record.
Register a system even if you are not sure it is in scope. Running it through classification is the cleanest way to find out — and a system you have assessed and excluded is a far better answer to a regulator than one you never looked at.
The questions that switch obligations on and off
A handful of yes/no answers change which obligations apply. The engine reads them as flags on the system, so answer them honestly.
| Question | Screen | What it drives |
|---|---|---|
| Public body, or private provider of a public service? | Duties (Art. 27) | Decides whether a deployer of a high-risk system owes a fundamental-rights impact assessment before first use. |
| Own name, substantial modification, or changed purpose? | Duties (Art. 25) | Any yes makes a deployer, importer or distributor the provider under Art. 25(1) — the heaviest obligation set. |
| Do you place a GPAI model on the market? | Model | Yes adds Art. 53 (and Art. 55 for systemic risk); using someone else's model adds nothing. |
| Annex I safety component? | Model | The Art. 6(1) route to high-risk for product-embedded AI. |
| Any Art. 5 practice? | Prohibited | A match makes the system Prohibited. |
| Annex III area, and the Art. 6(3) claim | Risk | Sets the high-risk tier under Art. 6(2); a narrow-task claim removes it unless the system profiles natural persons. Choosing employment also marks the system as workplace AI, which adds the deployer's Art. 26(7) worker-information duty. |
| Interacts with people? | Transparency | Art. 50(1): tell people they are dealing with an AI system. |
| Generates synthetic content? | Transparency | Art. 50(2) machine-readable marking and Art. 50(4) deepfake and public-interest text disclosure. |
| Emotion recognition or biometric categorisation? | Transparency | Art. 50(3) notification of the people exposed — and in workplace or education settings the practice may be prohibited under Art. 5. |
| Personal data, and your role for it | GDPR | Generates the GDPR rows — lawful basis, special categories, automated decisions, processor contract, DPIA, transfers — beside the EU AI Act ones. |
The transparency triggers are independent of the risk tier. A minimal-risk chatbot still owes Art. 50; a high-risk hiring tool that also generates content owes both its Annex III duties and the labelling duties. The engine layers them.
Your inventory
Each registered system is a row on AI systems — its tier, your role, the frameworks touching it, its journey phase, its owner, obligations done over total — and a card on the board view. Open it for the seven-tab record: Overview, Obligations, Risks, Incidents, Evidence, Documents, Activity. See AI systems: the register and the system record.
Once registered, the system's classification dossier opens with a sealed, tamper-evident first entry, and a classification evidence record is minted against its Art. 5 obligation — your audit trail starts on day one.