Question · EU AI Act
When does the EU AI Act apply to high-risk systems?
The AI Act is the EU's risk-tiered AI law: it bans certain practices, sets strict duties for high-risk systems, imposes transparency duties on chatbots and generated content, and regulates general-purpose AI models.
01 / The answer
The short answer
Obligations for high-risk AI systems listed in Annex III, such as systems used in employment, education and biometrics, apply from 2 December 2027. High-risk AI built into products covered by the EU product laws in Annex I, such as toys or lifts, follows on 2 August 2028. These dates come from the Digital Omnibus on AI (Regulation (EU) 2026/1744), in force since 27 July 2026. Prohibitions have applied since 2 February 2025, general-purpose AI duties since 2 August 2025, and most other rules since 2 August 2026.
02 / The rule
What EU AI Act requires
The AI Act is the EU's risk-tiered AI law: it bans certain practices, sets strict duties for high-risk systems, imposes transparency duties on chatbots and generated content, and regulates general-purpose AI models. The Digital Omnibus, in force 27 July 2026, pushed high-risk obligations to December 2027 and August 2028 and left Article 50 transparency on 2 August 2026.
- 01Do not place on the market or use prohibited AI practices listed in Article 5.
- 02Take measures to support AI literacy among staff who operate or use AI systems (Article 4).
- 03High-risk providers: run risk management, data governance, technical documentation, logging, human oversight and accuracy controls, then complete conformity assessment.
- 04High-risk providers: register systems, monitor them after deployment and report serious incidents.
03 / Records
Records to keep
- 01AI system inventory with risk classification and role per system
- 02Annex IV technical documentation and conformity assessment records
- 03Automatically generated logs and post-market monitoring plan
- 04AI literacy training records and Article 50 disclosure/marking specifications
Optional evidence · where Planisphere fits
Keep a record anyone can check
When your team meets a duty, Planisphere can seal the event it reports as a receipt.
A disclosure shown, a review signed, a model change approved: the event your system reports.
The event becomes a sealed receipt, dated and attributed to whoever is signed in.
Paste the receipt into Verify. No account or key.
A record supports your compliance evidence process. It is not a legal finding or a certification. Systems that call Planisphere's gate API can also hold or refuse an action before it runs.
SOURCES
Go back to the source
EUR-Lex, Publications Office of the EU
EUR-Lex, Publications Office of the EU
European Commission
RELATED
Related: EU AI Act: the full guide · What is EU AI Act post-market monitoring?