EU AI Act
EU Artificial Intelligence Act (Regulation (EU) 2024/1689)
The world's first comprehensive AI law: risk-tiered obligations for AI systems placed on the EU market, with penalties up to EUR 35 million or 7% of global turnover.
113 individual requirements seeded and assessable in AIXYRA.
The EU AI Act regulates AI systems by risk tier: prohibited practices, high-risk systems, limited-risk systems with transparency duties, and minimal-risk systems. High-risk systems — including AI used in credit scoring, employment, essential services, and safety components — carry the heaviest obligations: risk management, data governance, technical documentation, human oversight, accuracy, and post-market monitoring.
The Act reaches beyond EU-headquartered companies: it applies to any provider or deployer placing AI systems on the EU market or whose outputs are used in the EU. With high-risk obligations now applying from December 2, 2027, organizations have a fixed window to inventory their AI, classify it, and build the documentation and oversight the Act demands.
Who it applies to
Providers, deployers, importers, and distributors of AI systems placed on the EU market or affecting people in the EU — regardless of where the organization is established.
Key requirement themes
Risk classification
Every AI system must be classified against the Act's tiers, including the Annex III high-risk categories — which requires knowing what AI you actually run.
Technical documentation & transparency (Article 13)
High-risk systems need documentation that lets deployers understand capabilities, limitations, and appropriate use — kept current as the system changes.
Risk management & data governance
A continuous risk management process across the lifecycle, plus data quality and governance requirements for training, validation, and testing data.
Human oversight & post-market monitoring
High-risk systems must be designed for effective human oversight, with incident reporting and monitoring after deployment.
Orientation for evaluators — not legal advice. Consult counsel for obligations specific to your organization.
How AIXYRA helps
- Register every AI system, agent, model, and its dependencies in one inventory — the prerequisite for classification
- Assess systems against seeded EU AI Act articles with evidence attached to each mapping, and reuse the same assessment across other frameworks
- Generate Article 13-aligned model cards from registry data, exportable as PDF or JSON
- Track compliance deadlines on the obligation calendar with recurrence and calendar export
- Monitor regulatory changes with AI-powered feeds so amendments flag affected assessments for re-review
EU AI Act FAQ
When do EU AI Act high-risk obligations apply?
High-risk system obligations apply from December 2, 2027, following the Digital Omnibus postponement under Regulation (EU) 2026/1744. Prohibitions and AI-literacy duties are already in force, and general-purpose AI obligations began in August 2025. Non-compliance penalties reach EUR 35 million or 7% of global annual turnover.
How does AIXYRA support EU AI Act compliance?
AIXYRA ships the EU AI Act as a built-in framework: you map each registered AI system against its articles, attach evidence, track coverage and scoring, generate Article 13-aligned model cards, and manage deadlines on the obligation calendar. One assessment can also map simultaneously to NIST AI RMF, ISO/IEC 42001, and the platform's other frameworks.
Assess your AI systems against EU AI Act
EU AI Act ships built into AIXYRA — and the same assessment maps to every other enabled framework at once.