The EU AI Act readiness.
Penalties for non-compliance with the Act's high-risk rules have real teeth, and the deadline just moved closer: December 2, 2027. Check what applies to you below to gauge your exposure (or non-exposure).
Gauge your readiness →How exposed is your business?
Most businesses aren't running one AI system, they're running several: a chatbot, a few dozen employees with ChatGPT open, maybe a custom agent, maybe a vendor's tool. Check everything below that applies and we'll show you where each one sits.
Pick at least one item above, even just the first one, so there's something to show you.
This gives you a starting point, not a legal determination. Confirm your specific obligations under the EU AI Act with legal counsel.
The EU AI Act rollout, phase by phase.
The EU AI Act is now the world's first comprehensive AI law, and its deadlines are no longer theoretical. If your business builds, buys, or deploys AI tools, even something as simple as a customer service chatbot, some part of this law almost certainly applies to you.
Bans on "unacceptable risk" uses
Social scoring, manipulation, and biometric surveillance uses are banned outright, under Article 5.
General-purpose AI model obligations
Obligations begin for providers of general-purpose AI models.
Transparency obligations apply
Article 50's disclosure requirements come into force across a broader set of AI use cases.
High-risk systems deadline
Full obligations land for the Annex III use cases (hiring, credit, and insurance decisions among them), shifted from the original August 2026 date.
Embedded AI systems deadline
Obligations extend to the Annex I safety-component systems embedded inside other regulated products.
Dates and article references reflect the Act's official text and the European Commission's published timeline as of September 2026.
Not all AI is regulated equally.
Unacceptable risk
Social scoring, manipulative, and biometric surveillance uses, prohibited outright under Article 5.
High-risk
Documentation and human oversight required under Article 6 and Annex III: hiring, credit, and insurance decisions sit here.
Limited risk
Disclosure required under Article 50: users must know they're interacting with AI.
Minimal risk
Largely unregulated: most everyday AI tooling falls here today.
Start with an inventory.
Inventory every AI tool currently in use or planned, map each one against the Act's risk tiers, and prioritize documentation and disclosure for anything touching hiring, lending, or safety decisions first.
Book your free 30-minute review →or 7%
of global annual turnover, whichever is higher, for breaching the Article 5 bans. Lower obligations (high-risk requirements, Article 50 disclosure) top out at €15M or 3%. For SMEs and startups specifically, the Act applies the lower of the two figures, not the higher.
This is an indicative snapshot, not a legal determination. Confirm your specific obligations under the EU AI Act with legal counsel.