An AI register is a structured inventory of every AI system your organisation uses, who owns each one, how each is classified under the EU AI Act, and the evidence that the resulting obligations are being met. It is the foundation document of AI governance: without it, you cannot say what AI you use, let alone show that you use it lawfully.
What belongs in an AI register
A useful register goes beyond a list of tool names. For each system it should record enough to support a classification decision and to prove the follow-through. At minimum:
- The system — what it is, what it does, which vendor supplies it, and what data it touches.
- A named owner — one person responsible for its use and its review. Unowned systems are where compliance fails.
- Its AI Act classification — prohibited, high-risk, transparency-only or minimal risk, with the reasoning recorded.
- Obligations and deadlines — what the classification requires and by when, from literacy training to chatbot disclosure.
- Evidence — training records, vendor due diligence answers, dated decisions and review notes.
Why the AI Act effectively requires one
The EU AI Act never uses the phrase “AI register”, but its structure assumes one exists. Article 4 requires AI literacy for staff who use AI — which means knowing which staff use which systems. Article 26 places duties on deployers of high-risk systems — which means knowing which of your systems are high-risk. Article 50 requires disclosure for chatbots and labelling of AI-generated content from 2026 — which means knowing where those systems sit in your customer journeys. Every one of these duties starts from an inventory. The full compliance picture for Irish firms rests on the same foundation.
Why a spreadsheet falls short
Plenty of firms start with a spreadsheet, and a spreadsheet is better than nothing. But it has three structural problems. First, it captures a list, not a legal analysis — it will not tell you that a CV-screening tool is high-risk under Annex III or that your chatbot needs disclosure wording by 2 August 2026. Second, it has no deadline engine: the Act’s dates are staggered across 2025 to 2028, and one of the biggest — the Annex III date — is itself moving, expected at 2 December 2027 subject to formal adoption of the Omnibus agreement. Third, a spreadsheet decays. Nobody owns it, nobody reviews it, and within six months it describes the AI you used to use.
The register as board evidence
For directors, the register is also the answer to an awkward question. The Institute of Directors found in Q1 2026 that 65% of Irish directors don’t understand the new AI rules. A board cannot plausibly claim oversight of AI without a document that says what AI the company uses and what is being done about it. A maintained register, reviewed on a cycle and minuted, is the simplest credible form of that oversight.
Building yours without the spreadsheet pain
AI Register Ireland gives Irish SMEs a maintained register out of the box: guided classification against the Act, the obligations and deadlines attached to each system, and the evidence trail kept in one place. See how it works.