EU AI Act
EU AI Act compliance, from Europe’s AI governance specialists.
Find every AI system, know its risk class, and produce the documentation regulators ask for.
What we do for you
- Automatic AI system discovery
- Risk classification (Article 6, Annex III) with documented reasoning
- Provider vs deployer role check
- Annex IV technical documentation
- Article 50 transparency checks
- AI literacy tracking
Why AnnexOps
AI regulation is our core expertise. We built AnnexOps for the AI Act first, and our team works on AI governance every day.
Frequently asked questions
Did the Digital Omnibus delay the AI Act?
Only the high-risk rules moved: to 2 December 2027 for Annex III systems and to 2 August 2028 for AI in Annex I products. The bans on prohibited practices, AI literacy duties, general-purpose AI rules and transparency rules still apply.
Am I a provider or a deployer?
You are a provider if you develop an AI system, or have one developed, and place it on the market or put it into service under your own name. You are a deployer if you use an AI system under your authority in a professional context. Many companies are both, for different systems, and a deployer can become a provider, for example by substantially modifying a high-risk system or putting its own name on it. AnnexOps runs this role check for every system in your inventory.
Does ISO 42001 make me AI Act compliant?
No. ISO 42001 is a voluntary management-system standard, while the AI Act sets legal obligations. But ISO 42001 builds most of the governance the Act needs: risk management, documentation, human oversight and continual improvement.
