KomplAI

EU AI Act: transparency duties from 2 August 2026, high-risk obligations from 2 December 2027

Is your company's use of AI compliant with the EU AI Act?

KomplAI checks your AI systems' documents and source code against the EU AI Act, DORA and the GDPR — every citation to these regulations is machine-verified against the official EUR-Lex texts. Report, action plan and Word/Excel export in minutes.

Try free — 1 analysis included See a sample report
Every citation to the AI Act, DORA & GDPR is machine-verified against the official EUR-Lex texts — for each finding you can see which provision is backed by the statute. Optional expert review: your findings are checked by a data-protection expert with over 10 years of experience before you rely on them.

Provider routing without data retention · A product by Tippel

What is the EU AI Act?

The EU AI Act (Regulation (EU) 2024/1689) is the world's first comprehensive law on artificial intelligence. It takes a risk-based approach: some AI practices are banned, “high-risk” AI is strictly regulated, and other systems carry transparency obligations.

It applies extraterritorially: any company that develops, provides or uses AI systems whose output affects people in the EU is in scope — regardless of where the company is based.

EU AI Act: risk tiers Unacceptable / Prohibited; High risk; Limited risk / Transparency duty; Minimal risk EU AI Act: risk tiers Unacceptable / Prohibited e.g. social scoring High risk e.g. hiring, credit scoring, biometrics Limited risk / Transparency duty e.g. chatbots, labelling AI content Minimal risk e.g. spam filters, AI in video games High-risk deadline: 02 Dec 2027

Why it matters

Fines up to €35M / 7%

Breaches of the prohibited-practice rules can be penalised with up to €35M or 7% of worldwide annual turnover.

More systems in scope than you think

Everyday AI applications are in scope — some as high-risk (e.g. hiring, credit scoring, biometric systems), others only via transparency duties (e.g. chatbots, labelling AI-generated content). Which tier applies depends on the specific use case — the same chatbot can move from the transparency tier into high-risk depending on how it is used.

The clock is ticking

Bans and AI-literacy duties have applied since February 2025, the GPAI duties since August 2025. The Art. 50 transparency obligations start on 2 August 2026, the Annex III high-risk obligations on 2 December 2027 — preparation takes time.

Guides on the deadlines:

What applies from August 2026 → Annex III: am I affected? → Roadmap 2026–2028 →

The stages & key dates (Art. 113)

⏱ 469 days left until the EU AI Act's high-risk obligations (2 December 2027).

  1. 01 Aug 2024 in force
    Entered into force
    The EU AI Act enters into force.
  2. 02 Feb 2025 in force
    Bans & AI literacy
    Prohibited AI practices (Art. 5) and the AI-literacy duty (Art. 4) apply — for providers AND deployers.
  3. 02 Aug 2025 in force
    GPAI models & penalties
    Obligations for general-purpose AI (GPAI) models, the governance structure and the penalty framework apply.
  4. 02 Aug 2026 in force
    Transparency obligations (Art. 50)
    The transparency obligations under Art. 50 apply — labelling of AI interaction, synthetic content and deepfakes. Systems already placed on the market before 2 August 2026 have a grace period until 2 December 2026.
  5. 02 Dec 2027 upcoming
    High-risk obligations (Annex III)
    The core obligations for high-risk AI systems under Annex III (e.g. recruitment, credit scoring, critical infrastructure) apply — risk management, data governance, documentation, human oversight, conformity assessment. Postponed from 2 August 2026 by the Digital Omnibus.
  6. 02 Aug 2028 upcoming
    High-risk via product law (Annex I)
    Obligations for high-risk AI systems that are safety components under existing product legislation (Art. 6(1)). Postponed from 2 August 2027 by the Digital Omnibus.

How it works

How KomplAI works — from the free risk check to a fully-cited report.
1

Create a case & upload

system description, contracts, DPIA, technical docs or your code repository.

2

Choose a profile

full check, high-risk deep dive, code audit, DORA, GDPR or transparency documentation.

3

Get your result

risk classification, obligation gap analysis with applicability dates, gap list and prioritised measures.

Every citation to the AI Act, DORA and GDPR is machine-verified against the official EUR-Lex texts. How we check →