Guides · every one cites the article it rests on

50 guides, written by the person who built the classifier.

Start here

Article 3, point (1) What counts as an AI system? The seven limbs of Article 3, point (1), read apart: inference is the hinge, adaptiveness is optional and a human approving every output does not take you out. Read the guide · 10 min → Articles 5, 6 and 50 Is your AI system high-risk? A decision tree Answer the questions in order: the Article 5 prohibitions, the Article 6(1) product route, Annex III under Article 6(2), the Article 6(3) exemption, Article 50. Read the guide · 7 min → Article 113 When does the EU AI Act apply to your system? Your date depends on your tier under Article 113: Annex III high-risk from 2 December 2027, Annex I from 2 August 2028, everything else since 2 August 2026. Read the guide · 11 min →
Rather see it for your own system?The check asks the same questions these guides explain, and gives you the answer for one of your own systems. Check your AI systems, free

Deadlines

6 guides
When does the EU AI Act apply to your system? Article 113 Your date depends on your tier under Article 113: Annex III high-risk from 2 December 2027, Annex I from 2 August 2028, everything else since 2 August 2026. 11 min read Which AI practices are prohibited under the EU AI Act? Article 5 Article 5 bans ten AI practices: eight under Article 113, third paragraph, point (a), two under that point's exception. Six can reach a B2B software company. 8 min read What are the general-purpose AI (GPAI) obligations under the EU AI Act? Chapter V General-purpose AI model providers owe the four Article 53 duties since 2 August 2025 under Article 113, third paragraph, point (b), plus Article 55 at scale. 7 min read High-risk obligations from 2 December 2027 Article 113 Annex III high-risk systems meet Articles 8 to 15, 16 and 26 from 2 December 2027: Article 113, third paragraph, point (c)(i). Annex I products follow (c)(ii). 9 min read Is my AI system grandfathered? Article 111 Under Article 111(2), a high-risk system you already run stays out until its design changes significantly; public-authority systems comply by 2 August 2030. 10 min read EU AI Act deadlines: every date, every article Article 113 Every EU AI Act date from 12 July 2024 to 31 December 2030, with the article that sets each, including the rows Regulation (EU) 2026/1744 moved on 27 July 2026. 8 min read

Risk classification

12 guides
How to classify your AI system Article 6 Your system is high-risk if it is an Annex I safety component or an Annex III use case, Article 6(1) and (2); Article 6(3) is the only exit from the second. 9 min read The Annex III high-risk categories Annex III Annex III lists the eight areas in which an AI system is high-risk under Article 6(2): each point with examples, the two carve-outs, how Article 7 changes it. 9 min read Article 50: the four limited-risk disclosures Article 50 Article 50 sets four transparency duties, two on providers and two on deployers: what each asks of you, when it applies and the Article 99(4) fine behind them. 10 min read What minimal risk still owes Article 4 If your system is not prohibited, not high-risk and owes no Article 50 duty, one duty still binds you: Article 4 AI literacy, for providers and deployers. 8 min read Is your AI system high-risk? A decision tree Articles 5, 6 and 50 Answer the questions in order: the Article 5 prohibitions, the Article 6(1) product route, Annex III under Article 6(2), the Article 6(3) exemption, Article 50. 7 min read When does the Article 6(3) exemption apply? Article 6(3) An Annex III system leaves high-risk under Article 6(3) only by one of four conditions, never if it profiles natural persons; document it under Article 6(4). 9 min read What counts as an AI system? Article 3, point (1) The seven limbs of Article 3, point (1), read apart: inference is the hinge, adaptiveness is optional and a human approving every output does not take you out. 10 min read Is Complipath itself an AI system? Article 3, point (1) Yes, on our reading of Article 3, point (1) and recital 12: we treat all three systems we ship as AI systems, and your obligations do not move with our answer. 10 min read We ran our classification engine on itself Article 3, point (1) We ran Complipath's own classifier on Complipath: minimal risk for both systems, one false sentence about itself, one question it cannot ask. All verbatim. 5 min read How many AI systems do you have? Article 3, point (1) Article 3, point (1) defines an AI system; no provision counts them. The seam the law is sensitive to is intended purpose, so our rule names its convention. 6 min read The ten prohibited AI practices in Article 5 Article 5(1) Article 5(1) point by point: the eight original prohibitions, the two Regulation (EU) 2026/1744 inserted as points (ba) and (bb), plus what narrows them. 7 min read Chatbots and voice agents under the EU AI Act Article 50 A support chatbot or an outbound voice agent: the duty that applies to almost all of them, the two things that change the answer, and the dates in force. 7 min read

Roles

11 guides
Am I a provider or a deployer? Article 3, points (3) and (4) A provider develops an AI system and places it on the market under its own name; a deployer uses one under its own authority. Article 3, points (3) and (4). 8 min read What are the importer and distributor obligations under the EU AI Act? Articles 23 and 24 Importer under Article 3, point (6) or distributor under point (7): what you verify under Articles 23 and 24 before a high-risk system reaches the EU market. 10 min read When does a deployer become a provider? Article 25 Three Article 25(1) triggers make a deployer the provider of a high-risk system: your name on it, a substantial modification, a new purpose. Article 16 follows. 10 min read Who needs an EU authorised representative? Article 22 As a provider outside the EU, Article 22(1) makes you appoint an EU-established authorised representative by written mandate before your high-risk system ships. 9 min read Does the EU AI Act apply outside the EU? Article 2(1) Yes, if you place a system on the Union market or its output is used in the Union: Article 2(1), points (a) and (c). Where your company sits is no test. 7 min read Am I a deployer if we just use ChatGPT at work? Article 3, point (4) Yes, if you use it under your own authority in a professional activity: Article 3, point (4). Buying rather than building changes nothing about the role. 6 min read Does the AI Act apply to internal tools? Article 2 Yes. Putting an AI system into service for your own use makes you its provider under Article 3, point (3); the provider duties attach even when nothing is sold. 6 min read EU AI Act deployer obligations (Article 26) Article 26 EU AI Act deployer obligations under Article 26: instructions for use, human oversight, input data, monitoring, logs, informing people, registration. 8 min read EU AI Act provider obligations (Article 16) Article 16 EU AI Act provider obligations under Article 16: the twelve duties, what each one requires and when it applies for Annex III and Annex I systems. 9 min read Article 27 fundamental rights impact assessment Article 27 Who owes an Article 27 fundamental rights impact assessment, the six points it covers, how the DPIA overlap changed in 2026 and when it applies. 10 min read EU AI Act database registration (Article 49) Article 49 and Annex VIII Who must register in the EU database under Article 49 of the EU AI Act, what Annex VIII asks each of them to file and which date applies to the duty. 10 min read

Requirements

16 guides
What does Article 9 of the EU AI Act require for risk management? Article 9 Article 9 makes you run a risk management system over a high-risk AI system's whole lifecycle: identify, estimate and evaluate its risks, treat them, then test. 9 min read What are the data governance requirements under the EU AI Act (Article 10)? Article 10 Article 10 sets the data governance you owe for training, validation and testing data: eight practices, a representativeness standard and a strict bias pathway. 10 min read What goes into EU AI Act technical documentation? The Annex IV checklist Article 11 and Annex IV Article 11(1) requires your Annex IV technical documentation before market placement. Here are the nine points, the SME form and the Article 18(1) ten-year duty. 10 min read What are the logging and record-keeping requirements under the EU AI Act? Articles 12 and 19 Article 12 obliges you to log a high-risk AI system's events automatically, and Articles 19 and 26(6) say how long you keep the logs: at least six months. 10 min read What are the EU AI Act's transparency obligations toward deployers under Article 13? Article 13 Article 13 obliges you, as provider, to give deployers instructions for use that explain how a high-risk system operates: what they must contain, in order. 10 min read What does Article 14 of the EU AI Act require for human oversight? Article 14 Article 14 makes you design human oversight into a high-risk AI system: what an overseer must be able to do, and what you assign as deployer under Article 26(2). 10 min read What does Article 15 of the EU AI Act require for accuracy, robustness and cybersecurity? Article 15 Article 15 requires accuracy, robustness and cybersecurity from a high-risk AI system: declared metrics, feedback-loop controls and defences against attacks. 9 min read Who does the EU AI Act's AI literacy duty apply to? Article 4 Article 4 binds you as a provider or deployer of AI systems at any risk level since 2 February 2025; Regulation (EU) 2026/1744 rewrote it on 27 July 2026. 7 min read EN 18286:2026: published, not yet cited Article 40 The first EN standard written for the AI Act is published. Its reference is not in the Official Journal, so Article 40(1) gives it no presumption of conformity — and Article 17(1), point (e) tells you what to write down instead. 8 min read How to answer AI supplier questionnaires Articles 4, 26 and 50 Answer AI questions in a supplier security questionnaire: five parts per answer, four statuses, the article behind each question, a free Excel template. 7 min read AI Act Conformity Assessment Software Article 43 and Annexes VI and VII Article 43 conformity assessment: Annex VI internal control or an Annex VII notified body, when each applies and what Complipath does not do. 7 min read AI Act quality management system (Article 17) Article 17 Article 17 quality management system: the thirteen aspects it must cover, proportionality for SMEs and SMCs, sectoral and financial routes, dates. 13 min read AI Act declaration of conformity (Article 47) Article 47 and Annex V Article 47 and Annex V: the eight items an EU declaration of conformity must carry, who draws it up, how long it is kept and when it applies. 9 min read EU AI Act post-market monitoring (Article 72) Article 72 EU AI Act post-market monitoring under Article 72: the provider's system, the plan in Annex IV, Commission guidance due 2027 and two integration routes. 8 min read AI Act serious incident reporting (Article 73) Article 73 Article 73 serious incident reporting: the 15-day, 10-day and two-day limits, what starts each, who reports to whom and the open question on dates. 12 min read The AI questions supplier questionnaires ask Articles 4, 6, 26 and 50 The fifteen AI questions supplier security questionnaires ask, each with the EU AI Act provision it is about, and which apply only to high-risk systems. 5 min read

Industry

3 guides
Is HR software high-risk under the EU AI Act? Point 4 of Annex III Recruitment and workforce AI is high-risk under point 4 of Annex III; emotion inference at work is banned by Article 5(1), first subparagraph, point (f). 9 min read Is fintech AI high-risk under the EU AI Act? Point 5(b) of Annex III Banking AI: credit scoring and life and health insurance pricing are high-risk (points 5(b) and (c) of Annex III); collections can meet Article 5. 9 min read Is healthcare AI high-risk under the EU AI Act? Annex I and Annex III Eligibility and emergency-triage AI in public healthcare is high-risk under Annex III; device AI needing a notified body is high-risk under Article 6(1). 11 min read

Comparisons

2 guides
EU AI Act vs GDPR: what's actually different? Article 2 If your AI system processes personal data, GDPR and the EU AI Act bind it at once under Article 2(7): different triggers, roles, artifacts and fine ceilings. 11 min read What does an EU AI Act violation cost? Article 99 Breaching Article 5 costs you up to €35 million or 7 % of worldwide turnover, whichever is higher (Article 99(3)); for SMEs Article 99(6) makes it the lower. 10 min read
Answers by topic
The questionnaire answer library →

How to answer each kind of AI question a customer's supplier questionnaire asks: the typical questions, an example answer, the evidence and the article behind it.
Your own numbers
The EU AI Act compliance cost calculator →

Your number of AI systems, your hours per system and your cost per hour, multiplied, with both formulas on the page. It assumes nothing.
Answers by tool and industry
The EU AI Act by tool, industry and country →

ChatGPT, Microsoft Copilot, Google Gemini, Claude and the AI in your CRM or HR system; customer service, marketing, education and suppliers to the public sector; and Swedish companies. Where each use usually sits, and what would make it high-risk.
Not a guide — about the product
What this check can and cannot decide →

The guides above are about the Regulation. This one is about our engine: five things the classification decides, five it hands to a human, written once by a person against what it actually covers.

Every guide ends in the same place: your own systems.

No account needed. Every answer cites the article it rests on.

Check your AI systems, free Book a 30-minute walkthrough