{"head":{"title":"EU AI Act Risk Checker: Is My AI High-Risk? | OceanLab","description":"Answer a few questions to see your likely EU AI Act risk tier, the obligations that follow and the dates they apply, with article references.","canonical":"https://oceanlab.in/tools/eu-ai-act-risk-checker"},"tool":{"slug":"eu-ai-act-risk-checker","path":"/tools/eu-ai-act-risk-checker","name":"EU AI Act risk checker","h1":"EU AI Act risk checker","lede":"Answer a few questions about your AI system to see its likely risk tier, what you would have to do, and from when.","category":"compliance","categoryTitle":"Compliance checklists","method":["The checker applies the Act's tests in order. A prohibited practice under Article 5 ends the check. Otherwise, a safety component under Annex I or a use in an Annex III area makes the system high-risk, unless an Article 6(3) condition applies and the system does not profile people.","Article 50 transparency duties are added on top of any tier: telling people they are talking to an AI, marking synthetic content, and disclosing emotion recognition or deepfakes.","Dates follow Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744 (the Digital Omnibus on AI): 2 December 2027 for Annex III systems and 2 August 2028 for Annex I systems.","General-purpose AI model duties (Chapter V) are out of scope."],"sources":[{"label":"Regulation (EU) 2024/1689 (AI Act)","url":"http://data.europa.eu/eli/reg/2024/1689/oj","checkedAt":"2026-10-23"},{"label":"Regulation (EU) 2026/1744 (Digital Omnibus on AI)","url":"http://data.europa.eu/eli/reg/2026/1744/oj","checkedAt":"2026-10-23"}],"faq":[{"question":"When do the high-risk rules apply?","answer":"After Regulation (EU) 2026/1744: 2 December 2027 for Annex III systems and 2 August 2028 for systems covered by Annex I product law."},{"question":"Can an Annex III system avoid high-risk status?","answer":"Under Article 6(3), if it only does a narrow procedural or preparatory task and does not profile people. You must document that assessment and still register the system."},{"question":"What are the maximum fines?","answer":"Up to EUR 35M or 7% of worldwide turnover for prohibited practices, and up to EUR 15M or 3% for most other breaches (Article 99)."},{"question":"Is this legal advice?","answer":"No. It is a first-pass classification to plan engineering work. Confirm the result with counsel."}],"notice":{"title":"Guidance, not legal advice.","text":"This is a first-pass classification to plan engineering work; confirm it with counsel."},"updatedAt":"2026-10-25"},"related":[{"href":"/tools/soc-2-checklist","label":"SOC 2 checklist","detail":"Turn the SOC 2 criteria into engineering tasks, pick the categories in scope, and track what is still open."},{"href":"/tools/hipaa-checklist","label":"HIPAA checklist","detail":"Work through every Security Rule safeguard with its citation and what it means for your code, then export your progress."},{"href":"/tools/llm-api-cost-calculator","label":"LLM API cost","detail":"Enter your monthly tokens and the input, cached and output mix, and compare what each model would cost."}],"studies":[{"meta":{"slug":"leitstern","industry":"telehealth","projectType":"AI symptom checker","country":"at","tags":["healthcare","ai","enterprise"],"compliances":["EU MDR (class IIa)","ISO 13485","ISO 14971","IEC 62304","IEC 62366-1","EU AI Act","GDPR","Austrian DSG","WCAG 2.1 AA"],"cover":{"src":"/case-studies/leitstern/01-home.png","width":1440,"height":1000}},"text":{"en":{"title":"Leitstern - AI Symptom Checker with a Clinical Governance Console","description":"Designed and built the clinical governance console for a CE-marked symptom checker that tells people in Austria how urgently to seek care: releases of clinical content, red-flag rules and locked models approved by e-signature against a passing regression run, real-world under-triage tracked from follow-ups, and vigilance deadlines kept in view.","category":"Telehealth / AI Symptom Checker","client":"Donauhain Health"}}},{"meta":{"slug":"sonde","industry":"ai","projectType":"AI evaluation dashboard","country":"fr","tags":["ai","enterprise","insurtech"],"compliances":["EU AI Act","GDPR (Article 9 health data)","DORA","HDS health data hosting","ACPR AI governance","OpenTelemetry GenAI conventions"],"cover":{"src":"/case-studies/sonde/01-home.png","width":1440,"height":1000}},"text":{"en":{"title":"Sonde - LLM Evaluation and Observability Platform with Release Gates","description":"Designed and built a clickable LLM evaluation and observability platform for the AI team of a French health mutual: redacted production traces span by span, release gates that block a prompt or model change when quality regresses, alerts with owners and ageing, and the monitoring record its risk and compliance teams can show a supervisor.","category":"AI & Automation / LLM Evaluation","client":"Mutuelle Serpolet"}}},{"meta":{"slug":"keelson","industry":"hr","projectType":"Performance & OKRs","country":"de","tags":["ai","enterprise"],"compliances":["BetrVG","GDPR","BDSG","AGG","EU AI Act"],"cover":{"src":"/case-studies/keelson/01-home.png","width":1440,"height":1000}},"text":{"en":{"title":"Keelson - Performance and OKR Platform with the Works Agreement Built In","description":"Designed and built a clickable performance platform for a 520-person Berlin SaaS company with a works council: OKRs on an alignment tree with weekly check-ins, a manager review workspace with an AI summary the manager must edit before submitting, and calibration on a 9-box with a reason logged for every change.","category":"HR & Payroll / Performance & OKRs","client":"Havelgrund Software GmbH"}}},{"meta":{"slug":"tallyman","industry":"ai","projectType":"Document processing (IDP)","country":"nl","tags":["ai","enterprise"],"compliances":["EU AI Act","GDPR","Union Customs Code","CN and TARIC","ISO 6346","Incoterms 2020","eFTI Regulation","EN 16931 and Peppol"],"cover":{"src":"/case-studies/tallyman/01-home.png","width":1440,"height":1000}},"text":{"en":{"title":"Tallyman - Intelligent Document Processing for Trade and Customs Documents","description":"Designed and built a clickable document processing platform for a Rotterdam freight forwarder and customs representative: it classifies commercial invoices, packing lists, bills of lading, air waybills and certificates of origin, extracts each field with a confidence score, checks it against business rules and sends only the uncertain fields to a person in a side-by-side review workspace.","category":"AI & Automation / Document Processing","client":"Merwedijk Forwarding B.V."}}},{"meta":{"slug":"kaganek","industry":"ai","projectType":"RAG knowledge assistant","country":"pl","tags":["ai","enterprise"],"compliances":["GDPR","EU AI Act","ISO/IEC 27001","ISO/IEC 42001","Polish labour law"],"cover":{"src":"/case-studies/kaganek/01-home.png","width":1440,"height":1000}},"text":{"en":{"title":"Kaganek - RAG Knowledge Assistant with Citations and Permissions Intact","description":"Designed and built a clickable internal knowledge assistant for a Kraków consulting engineering firm: staff ask in Polish or English and get answers built only from the firm's own SharePoint, Confluence, Google Drive and file share documents, with every claim linked to its source passage and an honest \"I don't know\" when the sources are weak.","category":"AI Agents & Automation / Knowledge Assistant","client":"Modrzew Engineering"}}}],"more":[{"href":"/case-studies/industry/ai","label":"AI agents & automation case studies","detail":"Every OceanLab product build in AI agents & automation."},{"href":"/case-studies/industry/regtech","label":"RegTech & compliance case studies","detail":"Every OceanLab product build in RegTech & compliance."},{"href":"/case-studies","label":"All case studies","detail":"Every OceanLab product build."},{"href":"/ai-automation","label":"AI automation","detail":"AI built into real business workflows, with people in charge."}],"today":"2026-10-25"}