Skip to content
papii

Document template · eu.ai_act.ai_risk_assessment

AI Risk Assessment (Art. 9 AI Act)

  • Render-verified
  • Official document
  • Version 1.0.0

Record of the continuous, iterative risk management system for a high-risk AI system, established, implemented, documented and maintained by the provider under Article 9 of Regulation (EU) 2024/1689 (AI Act). Captures identification and analysis of known and reasonably foreseeable risks (Art. 9(2)(a)), estimation and evaluation of risks that may emerge when the system is used in accordance with its intended purpose and under conditions of reasonably foreseeable misuse, adoption of appropriate and targeted risk-management measures (Art. 9(5)), testing evidence (Art. 9(6)-(8)), and post-market monitoring feedback (Art. 72). The system record is reviewed and updated regularly throughout the lifecycle of the AI system.

JSON Schema

Fields in this template

Data sent to the API is validated against the template’s JSON Schema before anything is rendered. This template defines 43 fields:

Field Required Type Description
system Required object Identification of the AI system being assessed (cross-reference to the Annex IV technical documentation).
system.name Required string
system.version Required string
system.provider Required string
system.high_risk_category Required enum Annex III high-risk category under which the system is classified. Must match the classification declared in the sibling AI system technica…
assessment Required object Metadata for this iteration of the Art. 9 risk management record.
assessment.reference Required string
assessment.assessment_date Required date
assessment.version Required string
assessment.methodology Required string Prose description of the methodology used to identify, estimate and evaluate risks (Art. 9(2)).
assessment.next_review Required date
intended_purpose Required string Description of the intended purpose of the AI system, as required by Art. 9(2)(a).
reasonably_foreseeable_misuse Required string Description of reasonably foreseeable misuse (Art. 3(13), Art. 9(2)(b)).
identified_risks Required array of object Known and reasonably foreseeable risks that the AI system can pose to health, safety or fundamental rights (Art. 9(2)(a)).
identified_risks[].id Required string
identified_risks[].category Required enum
identified_risks[].description Required string
identified_risks[].who_affected Required array of string Stakeholder groups affected by the risk.
identified_risks[].likelihood Required enum
identified_risks[].severity Required enum
identified_risks[].impact Required string
mitigations Required array of object Appropriate and targeted risk-management measures adopted for each identified risk (Art. 9(5)). Keyed by risk_id.
mitigations[].risk_id Required string
mitigations[].measures Required array of string
mitigations[].residual_likelihood Required enum
mitigations[].residual_severity Required enum
mitigations[].owner Required string
testing_evidence Optional array of object Testing evidence demonstrating that the risk-management measures have the intended effect (Art. 9(6)-(8)).
testing_evidence[].test_name Required string
testing_evidence[].result Required string

+13 more fields — the full JSON Schema is available in the dashboard and via the API.

POST /render

Generate it

One POST /render call: send your JSON, get the finished PDF back. Or skip the JSON entirely and describe the document in plain language on chut.app.

curl 
curl -X POST https://api.papii.eu/render \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "template": "eu.ai_act.ai_risk_assessment",
    "data": { ... },
    "options": {"language": "en"}
  }' -o ai-risk-assessment.pdf
Generate with AI on chut.app Try in the dashboard

Frequently asked questions

What is “AI Risk Assessment (Art. 9 AI Act)”?

Record of the continuous, iterative risk management system for a high-risk AI system, established, implemented, documented and maintained by the provider under Article 9 of Regulation (EU) 2024/1689 (AI Act). Captures identification and analysis of known and reasonably foreseeable risks (Art. 9(2)(a)), estimation and evaluation of risks that may emerge when the system is used in accordance with its intended purpose and under conditions of reasonably foreseeable misuse, adoption of appropriate and targeted risk-management measures (Art. 9(5)), testing evidence (Art. 9(6)-(8)), and post-market monitoring feedback (Art. 72). The system record is reviewed and updated regularly throughout the lifecycle of the AI system. On papii this document is available as template eu.ai_act.ai_risk_assessment: a JSON Schema plus a deterministic PDF renderer, so the same data always produces the same document.

Can I generate a AI Risk Assessment (Art. 9 AI Act) with AI?

Yes. chut.app — the AI back office papii powers — fills this template from a plain-language description: you describe the document in one sentence, the AI structures the data, papii validates it against the schema and renders the PDF. Developers can also call the papii API directly with structured JSON.

Is the AI Risk Assessment (Art. 9 AI Act) template legally compliant?

This template is render-verified: its schema, sample data and PDF output are automatically tested on every release. It is published with status “ready”, meaning it has not yet been through papii’s final legal review. Where it references specific legislation, that is stated in the template description — always have a professional check documents with legal effect before relying on them.