AI Risk Classification Under the EU AI Act
How to determine your AI system's risk level and what it means for compliance.
AI Risk Classification
The EU AI Act classifies all AI systems into four risk tiers. Prohibited AI practices (Article 5) are banned outright. High-risk AI systems (Annex III) require full compliance from 2 December 2027, and Annex I product-embedded systems from 2 August 2028, per Regulation (EU) 2026/1744 (adopted 8 July 2026, in force since 27 July 2026), which extended the original single 2 August 2026 date. Limited-risk AI has transparency obligations (disclosure to users). Minimal-risk AI has no mandatory obligations. Determining which tier applies to your AI system is the starting point for all compliance work.
Guides
Is My AI System High-Risk? A Decision Tree
Interactive EU AI Act risk classification decision tree. Covers Article 5 prohibited practices, all 8 Annex III high-risk categories, GPAI model obligations, and Article 50 transparency.
Annex III Deep Dive: All 8 High-Risk Categories
All 8 EU AI Act Annex III high-risk AI categories explained with real-world examples, relevant articles, compliance obligations, and the Article 6(3) exception rules.
Annex IV Technical Documentation: The 9 Sections Explained
Complete guide to EU AI Act Annex IV technical documentation. All 9 mandatory sections explained with required contents, implementation tips, and documentation automation guidance.
Shadow AI: Building an AI System Inventory
How to discover shadow AI and build a compliant AI system inventory for the EU AI Act. Covers codebase scanning, risk classification, central register setup, and ongoing governance.
How Scanara Helps
Scanara automates EU AI Act compliance from code to dossier. Connect your GitHub repos and get compliance reports in minutes.