What Does the EU AI Act Regulate?
Regulation (EU) 2024/1689 establishes a harmonized European legal framework for trustworthy, transparent, and safe artificial intelligence.
Who is covered?
Providers developing or marketing AI systems under their own brand, and commercial or public deployers operating AI systems within the European Union. Excluded are systems used exclusively for military, defence, or pure research purposes.
What does it require?
Risk-tiered obligations: strict prohibition of unacceptable practices (Art. 5), quality management, risk assessment, and human oversight for high-risk AI (Art. 9–15), and transparency rules for generative AI (Art. 50).
Transparency & Labeling
Transparency obligations under Article 50 (mandatory from 2 August 2026): informing natural persons when interacting with AI systems (e.g. chatbots), machine-readable marking and detectability of synthetic outputs (audio, image, video / deepfakes), and exposure notifications for emotion recognition or biometric categorisation systems.
General-Purpose AI (GPAI) Models
Rules for general-purpose AI (GPAI) models under Chapter V (Articles 51–56, applicable since 2 August 2025): technical documentation, downstream integration information, EU copyright compliance, and training content summaries using the AI Office template (Art. 53). Training compute exceeding 10^25 FLOPs triggers a statutory presumption of systemic risk.
What Penalties Apply for Violations?
Violations of prohibited AI practices risk fines up to €35 million or 7% of worldwide annual turnover. Non-compliance with high-risk obligations risks up to €15 million or 3% (Art. 99).
How it works
Answer
Eight short questions with predefined answers — no drafting required.
Review
Overview of all responses with immediate option to revise.
Result & Consultation
Instant readiness report in your browser (stored locally) and optional expert consultation.
Roadmap & Compliance
Initial classification, statutory deadlines, and actionable compliance roadmap.
What You Gain with AIActSteps
Initial classification
Signals on risk and transparency classification, computed deterministically from your inputs.
Open points
Clearly stated where answers are missing or specialist review is needed — never quietly omitted.
Next steps
Up to three concrete recommendations justified by your actual answers.
Example result
Example — Demonstration data
Scope: EU · Form version 2.0-aiact · Evaluated on 11/09/2026
Identified Security Status
- Formalized risk management system and documentation per Art. 9 — Action required
Recommended next steps
Continuous, iterative process throughout the entire lifecycle of high-risk AI required by law.
Verification of representativeness, error-freedom, and completeness of training and validation data.
Mandatory for CE marking and registration in the EU database prior to deployment.
Initial assessment based on your inputs — no certificate, no exhaustive audit.
Methodology and limits
Our preparation framework aligns strictly with Regulation (EU) 2024/1689, European AI Office guidance, and national supervisory standards. We assist developers and deployers in early compliance readiness.
Applicable across the European Economic Area (EEA).
European Legal Framework for AI
The EU AI Act represents the world's first comprehensive horizontal legal framework for artificial intelligence, establishing global benchmarks for human-centric, trustworthy AI.
Frequently Asked Questions about the EU AI Act
When does the EU AI Act take effect?
Regulation (EU) 2024/1689 entered into force on 1 August 2024. Prohibited AI practices (Art. 5) and AI literacy rules (Art. 4) apply as of 2 February 2025. Rules for general-purpose AI models (GPAI, Articles 51–56) apply from 2 August 2025. General provisions and Article 50 transparency apply from 2 August 2026. Annex III high-risk use cases apply from 2 December 2027; Annex I embedded high-risk systems apply from 2 August 2028.
What is the distinction between Providers and Deployers?
A provider develops an AI system or has it developed to place it on the market under its own name. A deployer uses an AI system under its authority in a professional context. Both roles carry distinct statutory obligations under the AI Act.
Which AI systems qualify as 'High-Risk'?
High-risk AI systems comprise standalone use cases listed in Annex III (applicable from 2 December 2027, e.g. biometrics, critical infrastructure, employment, credit scoring) and safety components in regulated EU harmonised products listed in Annex I (applicable from 2 August 2028, e.g. medical devices, machinery, vehicles).
What is required under the Article 4 AI Literacy duty?
Under Article 4, providers and deployers of AI systems must take measures to support the development of a sufficient level of AI literacy among their staff and other persons dealing with the operation and use of AI systems on their behalf, taking into account their technical role and operational context.
How does the AI Act differ from CRA and NIS2?
NIS2 governs organizational cyber resilience. CRA regulates hardware/software product security. The AI Act specifically regulates AI trustworthiness, transparency, and safety.
Dedicated Implementation Path & AI Act Audit
Verify your artificial intelligence systems under the EU AI Act. Clarify risk classification, GPAI duties, and transparency requirements with SKOPION Intelligence auditors.
Your data is processed confidentially in accordance with our Privacy Policy.