AI Risk Scorer — Multi-Framework AI System Register

Why AI Risk Scorer?

Most businesses now have AI somewhere in their stack — embedded in SaaS tools, custom-built workflows, vendor APIs, third-party agents. Most don't have a register that says which systems they use, what risk tier they fall under, or what their obligations are under the EU AI Act, ISO/IEC 42001, NIST AI RMF, or the ICO's AI auditing framework. Auditors, customers and regulators increasingly ask for it.

AI Risk Scorer turns "we have a few AI things" into a continuously-maintained, multi-framework AI register. £19/month, unlimited classifications, decision-ready output drafted by Claude Opus 4.7.

Free vs. Paid

• Free at /tools/ai-act — 3 classifications per day, EU AI Act only. Useful for a one-off check.
• Paid £19/month — unlimited classifications, multi-framework analysis (4 frameworks), AI register portal, action-item tracking, quarterly review reminders, register PDF export.

What you get

• Unlimited classifications — add every AI system in your stack, classify each in minutes
• Four frameworks per system:
  • EU AI Act (Regulation 2024/1689) — risk tier per Annexes I–III, GPAI obligations, Article 50 transparency, Article 4 AI literacy
  • ISO/IEC 42001:2023 — AI Management System alignment
  • NIST AI Risk Management Framework 1.0 — Govern / Map / Measure / Manage functions
  • ICO AI auditing framework (UK) — accountability, transparency, lawful basis, automated decisions (Art 22)
• Organisation-role analysis — Provider, Deployer, Importer, Distributor, GPAI Provider — each carries different obligations
• Action items per system with framework attribution, priority, and owner field — track what's done
• Register dashboard — portfolio view: how many high-risk systems, ISO 42001 gap density, oldest review
• Quarterly review reminder with delta analysis when you re-classify a system
• PDF export — full register printable for board, audit pack, vendor due diligence, customer questionnaires

Who it's for

• UK & EU SMEs preparing for the EU AI Act staged application (general-purpose AI Aug 2025, high-risk Dec 2027 — pending formal adoption under the EU Digital Omnibus)
• Businesses pursuing ISO/IEC 42001 certification or asked about it by enterprise customers
• Public-sector suppliers (UK ATRS, EU AI Act deployer obligations)
• Anyone responding to a customer or insurer "do you have an AI policy / register" question

How it works

1. Subscribe (£19/month, cancel anytime)
2. Access portal at /portal/ai-risk-scorer
3. Add an AI system — name, purpose, deployment context, training-data position, customer-facing or internal, etc.
4. Claude Opus 4.7 produces a multi-framework analysis (~30–60 seconds)
5. Review the classification, mark action items as in-progress, add another system, export the register
6. System sends quarterly review reminders for each registered system

What we don't do

This is a classification + register tool, not a conformity-assessment service. For high-risk systems requiring EU AI Act conformity assessment under Article 43, ISO 42001 certification audit, or NIST AI RMF programme implementation, our consultancy team takes it further. Request a bespoke quote from £750.

⚠️ Legal disclaimer (COMPLIANCE): This product is provided for information and compliance documentation only; it is not regulatory advice. Read the full disclaimer below or in our Terms of Service before purchase.