EU AI Act · GPAI · model information

Why AI model information matters for EU AI Act preparation.

Many companies use AI models indirectly through tools, APIs or platforms. Without visibility into model providers, model families, access types and evidence, a useful AI inventory is difficult to build.

From model to governance question

Model providerWho provides the model, API or platform?
Access typeLocal, open weight, API-only or SaaS?
Data flowWhich data goes to which provider?
EvidenceWhich technical and organisational information is missing?

Questions companies should prepare

  • Which model family or foundation model is behind a tool?
  • Is the model operated locally or through an external API?
  • Which data is sent to a provider, router or platform?
  • Are technical documentation, provider information or security materials available?
  • How should the model appear in the AI inventory?
  • Are there GPAI, third-party AI or supplier questions for specialist review?

CheckCom bridge

The model radar makes provider and model information more visible. The Lite Version turns such information into AI inventory light, supplier questionnaire, evidence matrix and expert-review questions.

Information that can feed an AI inventory

System and purpose

Tool, model, provider, department, deployment status, user groups and purpose.

Data and control

Data categories, personal data, human control and approval points.

Provider and evidence

Model information, technical materials, privacy, security and contact points.

Risk signals

HR, education, critical infrastructure, automated decision-making or sensitive data.