We use cookies to improve your experience and analyse site traffic.
We use cookies to improve your experience and analyse site traffic.
Fear, uncertainty, and doubt around the EU AI Act are understandable — the regulation is 144 pages of cross-referencing Articles, Annexes, and recitals. But for most organisations, the obligations are precise and manageable.
€35m
Whichever figure is higher applies. SME caps may apply; national competent authorities determine enforcement approach.
144
pages
of regulation
4
risk tiers
from minimal to prohibited
5
deadlines
phased enforcement 2024–2027
7%
max fine
of global annual turnover
Myths & Realities
Every AI tool we use needs to be registered.
The Act applies categorically to high-risk AI systems defined in Annex III, and prohibits a narrow set of practices under Article 5. Most minimal-risk tools carry only transparency obligations, if any at all.
Scope depends entirely on use case and risk classification.
Step one is always classification. If your system does not appear in Annex III, is not built on a GPAI model with systemic risk, and does not fall under Article 5 prohibitions, your obligations may be limited to transparency notices.
Compliance requires an army of lawyers and months of work.
The obligations are substantial for high-risk systems, but they are also precisely specified. Annex IV lists exactly what technical documentation must contain.
Structured tooling transforms a compliance project into a governed workflow.
Standard Intelligence maps every Annex IV requirement to a questionnaire section, routes sections to the right team members, and generates submission-ready documentation.
The deadlines are so far away we have time to wait.
The prohibited practices rules have been in force since August 2024. GPAI model obligations applied from August 2025. High-risk system full technical documentation requirements apply from 2 August 2026.
The most important deadline is months away.
Annex IV documentation for high-risk AI systems must be complete by 2 August 2026. For organisations with multiple systems or complex approval chains, starting now is not early — it is appropriate.
Enforcement Timeline
The regulation entered into force on 1 August 2024 and applies in phases.
Until high-risk obligations
Days
Hrs
Min
Sec
Complete Annex IV technical documentation required for all high-risk AI systems. Post-market monitoring, FRIA, and EU database registration all apply.
AI systems in products covered by existing EU harmonisation legislation — medical devices, machinery, aviation — get a full three-year transition.
Who It Applies To
The Act distinguishes between providers, deployers, importers, and authorised representatives. Each carries distinct obligations — and a single organisation may hold multiple roles simultaneously, compounding requirements.
Develops and places an AI system on the market. Carries the heaviest obligations: full Annex IV technical documentation, conformity assessment, CE marking, and post-market monitoring.
Puts a high-risk AI system into use. Responsible for Article 26 obligations: using the system per provider instructions, human oversight, FRIA, and monitoring for anomalies.
Places a third-country provider's AI system on the EU market. Must verify conformity assessment and technical documentation availability.
Acts on behalf of a third-country provider within the EU. Holds the Declaration of Conformity and acts as contact for supervisory authorities.
Early access is open for organisations with high-risk AI systems that need to be compliant by 2 August 2026.