The EU Artificial Intelligence Act (Regulation (EU) 2024/1689, as amended by Regulation (EU) 2026/1744): obligations for providers, deployers and other operators of AI systems and general-purpose AI models, by article, with the evidence that shows compliance.
Chapter I and Chapter III Section 1: who the AI Act applies to, the defined roles and terms, the AI literacy duty, and the two routes by which an AI system becomes high-risk, plus the Article 6(3) exemption.
Article 5: the AI practices banned outright in the EU, one page per prohibition, with the conditions, exceptions, related high-risk categories, application dates and maximum fines.
Chapter III Section 2, Articles 8 to 15: the design and documentation requirements every high-risk AI system must meet before it is placed on the market, and the evidence that shows it.
Chapter III Sections 3 and 5 and Chapter IX: what providers, deployers, importers, distributors and authorised representatives of high-risk AI systems must do, from quality management and conformity assessment to registration, post-market monitoring and incident reporting.
Chapter V: obligations for providers of general-purpose AI models, the extra duties for models with systemic risk, and the code of practice that providers can use to show compliance, all supervised by the AI Office.
Article 50 transparency duties for chatbots, synthetic content, emotion recognition and deepfakes; harmonised standards and presumption of conformity; who enforces the Act; the right to explanation; and the fines in Articles 99 and 101.
How the AI Act lands in specific industries: which Annex III or Annex I categories catch common uses in HR, lending, insurance, healthcare, education, critical infrastructure, the public sector, SaaS and regulated products, and the sector-specific carve-outs and dates.
AI Act duties for organizations that use, fine-tune, build on or self-host large language models and other general-purpose AI: deployer duties, when you become a model or system provider, open-source exemptions and transparency rules.
Running an AI Act compliance program: the checklist, an AI system inventory, readiness assessment, an AI governance policy and the documents each role must keep, with the dates that drive the plan.
How the AI Act treats testing and things going wrong: whether red teaming is required, regulatory sandboxes, real-world testing of high-risk systems before launch, and AI incident response across providers and deployers.
Who does what in AI Act compliance and what to buy: consultants and their cost, notified bodies for the systems that need them, what to outsource and what to keep, and self-hosted tools that produce AI governance evidence.
Questions organizations ask when the AI Act applies to them: risk classification, high-risk obligations, the timeline after the 2026 Digital Omnibus, provider versus deployer roles, general-purpose AI, conformity assessment, ISO/IEC 42001 and cost.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.