Direct answer

How do we set up an AI register and classify our systems?

You describe: You want oversight: which AI systems run, who owns them, and which risk category applies per system. Likely role: deployer (the organisation).

This applies now

Article 4: AI literacyApplicable

Coming up

Annex III: high-risk AIfrom 2 December 2027

The register is not a formal duty for every organisation, but it underpins every other piece of evidence: no inventory means no classification, no role assignment and no file.

Your first actions

Classify the use case and document the outcome. Assess Article 5, Article 6 and Annex III in that order and document purpose, context and any Article 6(3) exception.
Take role- and context-specific AI literacy measures. Determine for each role, system and context which combination of instruction, guidance, practice or training is appropriate.

Record this

Article 6 and Annex III classification record
AI literacy measures record

General interpretation, not legal advice. The official source remains authoritative.

Full map for your situation

Execution

Record the classification in an AI register

A classification without a register and ownership is not demonstrable. Embed AI guides classification, register and reassessment in a fixed approach.

See the Embed AI approach