Compliance · European Union
EU AI Act
The EU AI Act sorts AI systems by risk and sets duties for each level, from transparency notices up to full conformity assessments for high risk systems. We help you classify each system, work out if you count as a provider or a deployer, and prepare the documents.
Who it applies to
Is this law relevant to you?
Providers and deployers of AI systems used in the EU, including companies outside the EU whose AI output is used there.
Core obligations
What the law asks of you
A plain language summary. Your legal team should confirm how each point applies to your business.
- Risk classification
- Each system placed as prohibited, high, limited or minimal risk.
- Transparency
- Telling people when they are dealing with AI or looking at AI generated content.
- Risk management
- A written risk management system for high risk AI.
- Data governance
- Checks for quality and bias in training and test data.
- Technical documentation
- Records showing how the system works and how it was tested.
- Human oversight
- A person who can check and override high risk decisions.
How we help
From gap to evidence
- List and classify your AI systems
- Confirm your role as provider or deployer
- Technical documentation and logging
- Alignment with ISO 42001 and NIST AI RMF
- Red team testing and ongoing monitoring
Does the EU AI Act apply to general purpose AI tools we use?
Most obligations fall on the provider. As a deployer you still have duties, such as transparency and using the tool as intended. We help you tell the two apart.
Request a EU AI Act assessment
Regulations
Other laws we advise on
Start a conversation
Compliance that holds up in practice.
Start with a short assessment. We tell you which laws apply, what to fix first and what it will take.
A specialist replies within one working day. The first conversation is free.