Built for Regulated Businesses
- AI Startups
- Venture Capitalists
Helping AI companies, investors and regulated businesses prepare for the EU AI Act
- AI Startups
- Venture Capitalists
AI System Classification
Determine whether your AI system is prohibited, high-risk, limited-risk or general-purpose under the EU AI Act.
Gap Analysis & Readiness Review
Assess your existing governance, documentation and controls against the AI Act.
Governance Framework
Design policies, oversight structures and accountability processes for compliant AI deployment.
Technical Documentation
- Prepare the documentation, risk assessments and compliance records expected by regulators.
Cross-Border Regulatory Advice
- Coordinate UK and EU AI regulatory requirements for international businesses.
The AI Act aims to ensure that artificial intelligence systems and models marketed within the European Union are used ethically, safely, and respectfully, adhering to the fundamental rights of the EU.
It has also been written to strengthen the business AI competitiveness and innovation.
It will reduce the risks of AI drifts, strengthening users’ confidence in its use and adoption.
All providers*, distributors*, or deployers* of AI systems and models, legal entities (companies, foundations, associations, research laboratories, etc.), that have their registered office in the European Union, or are located outside the EU, who market their AI system or model within the European Union.
The level of regulation and associated obligations depend on the risk level posed by the AI system or model:
- “Minimal Risk,” i.e., AI systems that present minimal risk for individuals’ rights and safety. These systems are subject to certain transparency and identification requirements, such as requiring that users are made aware that they are interacting with an AI system.
- “Limited Risk,” i.e., AI systems that perform generally applicable functions such as image and speech recognition, translation, and content generation. These systems and models must adhere to certain transparency requirements, including compliance with copyright law and publishing summaries of the content used for training the AI system. Further, systems and models that pose systemic risks are subject to more stringent requirements, such as model evaluations, risk assessments, and testing and reporting requirements.
- “High Risk,” i.e., AI systems such as those used in healthcare or infrastructure, are subject to stricter requirements, including technical documentation, data governance, human oversight, security, conformity assessments, and reporting obligations.
- “Unacceptable Risk,” i.e., those that present a clear threat to the safety, livelihoods and rights of people will be banned (with narrow exceptions for law enforcement).
Different deadlines, ranging from 6 to 36 months, apply depending on the risk level of AI systems and models. Regardless of the deadline, it is essential to be prepared and anticipate compliance, which may disrupt the tech, product, and legal roadmaps of companies.
While this progressive timeline has been designed by the regulator to give companies enough time to comply, it is crucial to anticipate the next steps.