Evaluate your AI vendors with a structured approach

A 15-question due diligence checklist, a scoring workbook and a vendor report template, built for the legal, compliance and data protection teams that have to say yes or no to a third-party AI tool. HR and recruitment vendors are the most common starting point; the method applies to any AI vendor.

Get the Toolkit on Gumroad · €49 →

The problem it solves

A vendor says its AI system is “compliant”. What can they show you? The Toolkit gives your team one set of questions, one scoring method and one record of the answers, so that every vendor review is comparable and the evidence is on file.

What you get

The five categories and the 15 questions.

The scoring workbook. Example with synthetic vendor data; the template you receive is empty.

Who it is for

Legal, compliance and DPO teams reviewing AI tools before purchase or at renewal, and the people who advise them. Procurement can use it too, as the team that collects the vendor’s answers. It is a working tool for a professional who already knows the Regulation, not an introduction to it.

What it does not do

Check the text. The Article numbers and dates used in the Toolkit were checked on 5 November 2026 against the consolidated text of 27 July 2026, which incorporates Regulation (EU) 2026/1744. Verify against the Official Journal before relying on any date.

Price and format

€49, one-time, instant download from Gumroad (ZIP: Excel workbook, PDFs, guides). Current version: 1.2.

Get the Toolkit on Gumroad · €49 →

Not ready to buy?

Start with the free AI Act provider evidence checklist: the same logic from the provider’s side, with the 14 questions a customer can ask and the evidence to keep.

Not legal advice.