The EU AI Act's high-risk chapter is the part with real teeth — fines up to €15M or 3% of turnover, and €35M or 7% for prohibited practices. Below: live countdown clocks to the two enforcement dates, and an obligation mapper — pick your system type to see which duties apply to you and when. This page is not legal advice.
Direct answer: High-risk AI systems under the EU AI Act must meet Chapter III duties — risk management, data governance, technical documentation, human oversight, and more. Standalone Annex III systems: December 2, 2027. AI embedded in regulated products (Annex I): August 2, 2028. Prohibited practices already carry fines up to €35M or 7% of turnover.
Pick the closest system type. The mapper returns the classification, the duties that apply, and the deadline. Heuristic guide, not legal advice.
Not legal advice. This mapper is a heuristic guide based on the EU AI Act's published structure and reported dates. Classification depends on your exact use case, and exemptions exist. Confirm everything with qualified counsel before making compliance decisions.
Standalone high-risk systems (Annex III) must comply from December 2, 2027. AI embedded in regulated products as safety components (Annex I) must comply from August 2, 2028. These fixed dates were set by the Digital Omnibus on AI, Regulation (EU) 2026/1744, which entered into force on July 27, 2026.
Three tiers: prohibited practices (Article 5) carry up to 35 million euros or 7% of worldwide annual turnover under Article 99(3); most other breaches, including high-risk obligations, carry up to 15 million euros or 3% under Article 99(4). General-purpose AI model obligations enforced by the Commission run up to 15 million euros or 3% of turnover.
Two routes: systems listed in Annex III (use cases like recruitment, credit scoring, biometric identification, education, law enforcement, and public benefits) and AI embedded as safety components in products already regulated under Annex I EU laws (machinery, medical devices, vehicles, and similar). The obligation mapper on this page covers the common categories.
Both roles have duties. Providers carry the Chapter III requirements (risk management, documentation, conformity assessment, and more). Deployers must ensure human oversight, monitor the system in use, inform affected persons where required, and keep logs. If you substantially modify a system or put your name on it, you can become the provider.
No. This page is general information with live countdowns and a heuristic obligation mapper, based on publicly reported dates and the AI Act's published structure. It is not legal advice. Confirm your classification and duties with qualified counsel before making compliance decisions.
Honest scope: dates and fine tiers are drawn from the sources linked in Key facts (Intertek, AInvasion, EUR-Lex). The countdown clocks run in your browser from fixed UTC dates. The obligation mapper is heuristic and not legal advice; the AI Act's annexes and exemptions are more detailed than any mapper can capture.