Overlays

Most criteria apply to every organisation. Some only make sense for organisations with a particular characteristic, such as being a public body or building its own models. These are grouped into six overlays. Decide which apply to you; the criteria in the others are left out of your assessment.

PUBPublic bodyA public sector organisation, or one acting on its behalf, with public duties such as transparency and equality.4 criteria in 1 controls
PRVProvides AI to othersOffers AI services, products or models to customers, partners or the public, not only for its own use.5 criteria in 4 controls
HIRRegulated or high-impact useHas uses of AI that are regulated, high-risk under law, or could significantly affect people's rights, safety or access to services.7 criteria in 5 controls
GENGenerative AIUses AI that generates text, images, audio, video or code.6 criteria in 4 controls
AGTAgentic AIUses AI that can take actions in other systems or act with some autonomy, including through tools.5 criteria in 5 controls
BLDBuilds or tunes its own modelsTrains, fine-tunes or otherwise develops models or AI components itself, rather than only configuring others' products.5 criteria in 5 controls

An organisation can have any number of overlays, or none. A criterion tagged with more than one overlay applies when any of them applies. The self-assessment asks about each overlay before you start.