EU AI Act Guides
All articles in the EU AI Act category
EU AI Act Fines: Article 99 Penalties by Violation and Liable Role
EU AI Act fines under Article 99, mapped by violation, liable role, turnover cap, SME rule, 2026 amendment, and enforcement date.
EU AI Act Article 12: Logging Requirements for AI Agents
Map EU AI Act Articles 12 and 19 to an AI agent audit-trail specification covering events, identities, decisions, retention, integrity, and replay tests.
EU AI Act Article 14: Human Oversight for AI Agents
Implement Article 14 human oversight for AI agents with risk-based approvals, override and safe-stop controls, qualified reviewers, and defensible evidence.
EU AI Act Article 26: Deployer Obligations and a Runtime Checklist
A current guide to Article 26 duties for deployers of high-risk AI systems: oversight, input data, monitoring, logs, notices, incidents, and operational evidence.
EU AI Act August 2026: GPAI Enforcement and Article 50 Transparency
Article 50 transparency and the Commission fining powers over GPAI providers apply from 2 August 2026. A checklist by role for providers, deployers, and buyers.
EU AI Act Omnibus Adopted: The New Deadlines for 2027 and 2028
The Digital Omnibus on AI is adopted. Annex III high-risk obligations apply from 2 December 2027, Annex I from 2 August 2028, and Article 50 transparency from 2 August 2026.
MAS SAFR, the EU AI Act, and FINMA: Regulators Converge on Runtime Evidence
MAS's SAFR framework, the EU AI Act, and FINMA Guidance 08/2024 converge on one requirement: AI governance evidence produced at the moment of action.
FRIA for AI Credit Scoring: A Complete Worked Example
A complete, all-six-sections Article 27 FRIA for an AI credit-scoring system at a bank: risk register, GDPR Article 22, SCHUFA, and the fraud carve-out.
Insurance FRIA Template: Life & Health Pricing AI (Art 27)
A worked FRIA for an insurer deploying life and health pricing AI under Annex III 5(c). In/out scope table, Article 9 health-data depth, and a risk register.
What Is prEN 18283? The Draft AI Bias-Management Standard
prEN 18283 is the draft CEN-CENELEC standard for managing bias in AI systems. What it covers, its Working Draft status, and how it operationalizes Article 10.
JTC 21 Standards Tracker: CEN-CENELEC AI Act Deliverables
A living tracker of CEN-CENELEC JTC 21, the committee writing the EU AI Act harmonised standards: M/593 and M/613, prEN 18xxx status, and Article 40 conformity.
FRIA & CNIL: France Guide to the EU AI Act Article 27
How French deployers run an Article 27 FRIA: reuse your CNIL AIPD/DPIA, apply CNIL AI guidance, find France market-surveillance authorities, with an example.
ACPR AI Governance for French Banks: Credit, AML and DORA
How the ACPR governs AI in French banks and insurers: its four evaluation criteria, AML-CFT supervision, and how it stacks with the EU AI Act FRIA and DORA.
DPIA for AI Systems: A GDPR Article 35 Template That Lines Up With Your FRIA
When a DPIA is mandatory for AI under GDPR Article 35, the Article 35(7) content required, and how it overlaps with the EU AI Act Article 27 FRIA in one evidence pack.
Best EU AI Act compliance software 2026: A buyer's guide
Updated June 2026. The best EU AI Act compliance software splits into four categories: GRC automation, enterprise AI governance, LLM observability, and runtime control planes. Side-by-side comparison, a decision tree, and the questions that separate vendors.
EU AI Act Registration Guide: Article 49, Article 71, and Annex VIII
A practical guide to EU AI Act registration for high-risk AI systems: who must register, what goes into the EU database, what Annex VIII requires, and how to prepare evidence.
EU AI Act Article 50 Checklist for Chatbots, Copilots, and AI Agents
A practical Article 50 checklist for AI chatbots, copilots, and agents: user disclosures, AI-generated content labels, machine-readable marking, evidence logs, and implementation controls.
EU AI Act Article 10, prEN 18283, and Why Bias Scenarios Matter
Article 10 requires more than a data-quality checklist. A practical guide to bias profiles, relevant-group analysis, bias scenarios, and the operating model emerging around prEN 18283.
OWASP Agentic AI Top 10 × EU AI Act: The Complete Compliance Crosswalk
The definitive mapping of all 10 OWASP Agentic Security Initiative risks to specific EU AI Act articles. Includes the master crosswalk table, a 7-control framework, downloadable PDF workbook + checklist, and the December 2, 2027 compliance deadline.
AI Agent Post-Market Monitoring Plan | Article 72
Build an Article 72 post-market monitoring plan for AI agents: signals, owners, evidence, incidents, change triggers, and provider-deployer inputs.
EU AI Act Article 17 Checklist: What Providers Must Implement Before December 2027
An execution-ready Article 17 checklist for high-risk AI providers ahead of the 2 December 2027 date: scoping, control mapping, lifecycle controls, post-market operations, and audit evidence design.
France and prEN 18286: What the National Debate Means for EU Providers
A neutral analysis of the French mirror-committee debate on prEN 18286 and what it signals for SME proportionality, standards quality, and implementation strategy across EU member states.
EU AI Act Standards Ecosystem: EN 18286 and Its Companion Standards
Map EN 18286:2026 to EU AI Act standards for risk, trustworthiness, cybersecurity, data governance, and conformity assessment.
Article 17 Mapping in EN 18286: Coverage, Gaps, and Audit Implications
How to read EN 18286 Annex ZA mapping, connect Article 17 to related duties, and build defensible quality-management evidence.
EN 18286 vs ISO 9001 vs ISO/IEC 42001: What Changes
Compare EN 18286:2026, ISO 9001, and ISO/IEC 42001 for EU AI Act Article 17 scope, management-system reuse, evidence, and assurance.
EU AI Act Standards Timeline: What to Do as Deadlines Evolve
Track EU AI Act deadlines, EN 18286 publication status, developing companion standards, and the separate OJEU citation process.
What Is EN 18286? The Article 17 Quality Management Standard
A practical guide to EN 18286:2026 for EU AI Act providers, including Article 17 QMS scope, ISO overlap, OJEU status, and implementation priorities.
EU AI Act for SaaS Companies: Provider, Deployer, or Both?
Comprehensive compliance guide for SaaS companies with AI features. Covers provider vs. deployer classification, high-risk obligations, CE marking, contract requirements, and practical strategies for the phased EU AI Act rollout.
FRIA Template: Fundamental Rights Impact Assessment for EU AI Act Compliance
Free FRIA template and step-by-step guide for conducting Fundamental Rights Impact Assessments required by the EU AI Act. Includes practical examples for financial services, healthcare, and HR AI systems.
Annex IV Documentation Guide
How to create Annex IV technical documentation for high-risk AI systems: required sections, evidence types, and tips for building documentation that auditors will accept.
Classifying High-Risk AI Under the EU AI Act
The definitive classification methodology: two pathways to high-risk status, the Article 6(3) exception framework, the profiling override that eliminates all exceptions, and a step-by-step audit-ready classification process.
EU AI Act Requirements: What Compliance Officers Need to Know in 2026
The definitive guide for compliance officers: phased enforcement timelines, high-risk classifications, Annex IV documentation, human oversight requirements, penalty structures, and practical implementation strategies.