What is the EU AI Act?
The EU AI Act is the world's first comprehensive legal framework for artificial intelligence. It came into force in August 2024 and is being rolled out in phases through 2027. If your business uses AI tools — or builds them — this law applies to you.
Important 2026 update: The Digital Omnibus on AI (Regulation EU 2026/1744) entered into force on 27 July 2026, postponing some high-risk obligations. Annex III systems such as recruitment and credit scoring moved to 2 December 2027. AI embedded in regulated products moved to 2 August 2028. However, Article 50 transparency obligations — telling people they are interacting with an AI — still apply from 2 August 2026.
The Four Risk Categories
Prohibited (banned outright): Social scoring systems, real-time biometric surveillance in public, AI that manipulates behaviour subconsciously. Banned since February 2025.
High-Risk (strict requirements): AI used in hiring, credit scoring, healthcare, education assessment, law enforcement, and critical infrastructure. Must be registered, audited, and have human oversight.
Limited Risk (transparency rules): Chatbots and AI that interact with people must disclose they are AI. Deepfakes must be labelled.
Minimal Risk (no specific obligations): Most AI tools fall here — writing assistants, image generators, recommendation systems, spam filters.
The Implementation Timeline
- August 2024: Act enters into force
- February 2025: Prohibited AI systems banned
- August 2025: GPAI model rules apply to major AI providers
- August 2026: Article 50 transparency obligations apply
- December 2027: High-risk AI for recruitment and credit scoring (revised deadline)
- August 2028: AI in regulated products (revised deadline)
Which AI Tools Are Already EU AI Act Ready?
Claude (Anthropic) — Transparency documentation published, safety commitments in place. Ready.
Mistral AI — EU-based, GPAI compliance documentation published. Ready.
Synthesia — CE-marked, transparency on AI avatars, DPA available. Ready.
Personio — HR AI with human oversight built in. Ready.
Leapsome — Performance management AI with documented human review processes. Ready.
ChatGPT (OpenAI) — GPAI compliance in progress. In Progress.
GitHub Copilot — Microsoft EU AI Act roadmap published. In Progress.
What Does This Mean for Your Business?
If you use AI for writing, marketing, or productivity: Most tools fall into minimal risk. No mandatory requirements apply to you as the user.
If you use AI for hiring or HR decisions: You needed documented human oversight processes in place. The deadline for Annex III recruitment AI has moved to December 2027, giving more preparation time.
If you use AI in healthcare: Medical AI is high-risk. CE marking is increasingly required.
The 3 Things to Do Right Now
- Audit your AI tools — identify any that touch hiring, healthcare, credit, or legal decisions
- Ask vendors for their EU AI Act status — reputable vendors should be able to tell you where they stand
- Ensure Article 50 compliance — any AI chatbot or assistant interacting with customers or employees must identify itself as AI from August 2026
[Browse EU AI Act ready tools on stckfndr →](/?compliance=eu-act)