The three high-risk working files together: Art. 9 risk register, Annex IV technical documentation, and the Art. 10 data governance checklist.
Delivered by email immediately after payment. Excel file, one named user.
The three files a high-risk AI system needs, bought together.
They are the three obligations that produce documents a supervisor can ask to see:
They also feed each other. Annex IV §2(d) asks about the data, which is what the Art. 10 file holds. Annex IV §5 asks about the risk management system, which is the register. Filling them in isolation means filling parts of each one twice.
Check that you actually have a high-risk system. Annex III 5(b) excludes financial fraud detection, point 1 excludes 1:1 biometric verification, and algorithmic trading is not in the annex at all. The inventory and classification workbook settles that question first, and it is the cheaper mistake to avoid.
If your classification comes back clear of Annex III, the files you need are the transparency pack and the literacy programme — both of which apply whatever your tier.
Is your organisation subject to both the AI Act and DORA? The two regulations intersect on the operational resilience of financial AI systems. Our sister site regulation-dora.eu covers DORA in depth — including what the AI Act adds on top of an existing DORA programme.
The AI Act for financial institutions ↗ Explore regulation-dora.eu ↗High-risk systems under Annex I or Annex III. If your classification does not put a system in scope, these are not the files you need — start with the inventory workbook to settle that.
No. This is the template pack only. The AI Risk Management Pro certification bundles the course with these three files.
Yes, each is sold on its own. The pack exists because the three reference each other and filling them in isolation duplicates work.