Where: /app/euaiact/fria

Article 27 asks a deployer to hold a FRIA performed before first use, containing the elements the Article names.

What to test

• High-risk systems either carry a completed assessment or are visibly flagged as owing one.
• A completed assessment records when it was performed relative to first use — after is not compliance.
• Where notification is owed, it is recorded; where it is not owed, the page says so rather than leaving you to guess.

The mechanism worth probing

Open a draft FRIA that is missing required elements and try to complete it. The product should refuse and name the missing Article 27(1) elements rather than accepting an incomplete record.

That refusal is the control. Test it — a register that accepts anything is not a control, it is a text box.