Skip to content

EU AI Act compliance. For companies that use or build AI.

An inventory of your AI systems, risk classification, obligations by role and the governance that keeps it current. It starts with the AI Act starter, about 4 weeks.

Book a briefingIn short

30 minutes with a solution architect.

In short

What is EU AI Act compliance, and how does Solorai help?

The EU AI Act sets rules for AI systems by risk level and by role: providers build AI systems, deployers use them. Compliance means knowing which AI systems you have, classifying each one and meeting the obligations that follow on time. Solorai builds the inventory, classifies every system, maps your obligations and sets up the policy, training and governance, with legal opinions left to your lawyers.

Written and reviewed by Solorai

risk levels, from prohibited to minimal
4
high-risk obligations for Annex III uses
2 Dec 2027
about, for the AI Act starter
4 weeks

What does an EU AI Act compliance project include?

Six deliverables you keep. Your lawyers stay responsible for legal opinions.

  • AI system inventory

    A register of every AI system you use or build, with owner, purpose, data and supplier.

  • Risk classification

    Each system classified as prohibited, high-risk, limited or minimal risk, with the reasoning recorded.

  • Obligations by role

    What applies to you as provider or deployer, and by when, for each system.

  • Internal AI policy

    Which tools, data and uses are allowed, who approves new uses and how incidents are reported.

  • AI literacy measures

    Training for staff and for people who use AI on your behalf, as Article 4 requires.

  • Ongoing governance

    A routine that keeps the inventory, classifications and policy current as new AI tools arrive.

Timeline

Which obligations apply, and when?

The dates of the EU AI Act as amended by the Digital Omnibus, Regulation (EU) 2026/1744, in force since 27 July 2026.

  1. Prohibited practices and AI literacy

    , in force

    Banned practices, such as social scoring, and the duty to support AI literacy.

  2. General-purpose AI models

    , in force

    Obligations for providers of general-purpose AI models.

  3. Transparency

    , in force

    Chatbots must say they are AI, and AI-generated content must be marked.

  4. Two new prohibitions

    Applies from

    Bans on AI that creates non-consensual intimate images or child sexual abuse material, and the marking deadline for generative systems already on the market.

  5. High-risk uses in Annex III

    Applies from

    Obligations for high-risk uses such as recruitment, credit scoring and access to essential services.

  6. High-risk AI in regulated products

    Applies from

    Obligations for AI in products covered by Annex I, such as medical devices.

Where to start

How do we start with the EU AI Act?

Fixed formats with a clear scope. Prices are agreed in a written proposal.

  • EU AI Act

    AI Act starter

    An inventory of your AI systems, risk classification, an internal AI policy and AI literacy measures. Legal opinions are not included.

    Duration
    About 4 weeks
    For
    EU companies

  • Ongoing

    Adoption and governance

    Usage reports, new skills and connectors, and monthly updates to your AI policies.

    Cadence
    Monthly

FAQ

EU AI Act, in short

What is the EU AI Act?

The EU AI Act, Regulation (EU) 2024/1689, is the EU law on artificial intelligence. It sets rules by risk level, from banned practices to high-risk systems, and by role, with different duties for providers and deployers.

Does the EU AI Act apply to my company?

It applies to companies that build or use AI systems in the EU, and to companies outside the EU whose AI systems are used in the EU. Most companies are deployers: they use AI systems under their own authority.

What are the deadlines after the Digital Omnibus?

Prohibited practices and AI literacy apply since 2 February 2025, rules for general-purpose AI models since 2 August 2025 and transparency since 2 August 2026. Obligations for high-risk uses in Annex III apply from 2 December 2027, and for AI in regulated products from 2 August 2028.

What are the fines under the EU AI Act?

Up to EUR 35 million or 7% of worldwide annual turnover for prohibited practices, and up to EUR 15 million or 3% for most other obligations, whichever is higher. For SMEs, the lower amount applies.

What does an EU AI Act compliance project include?

An inventory of your AI systems, risk classification, a map of obligations by role, an internal AI policy, AI literacy measures and a routine to keep it all current. Solorai does not give legal opinions.

Is ISO/IEC 42001 certification enough for the EU AI Act?

No. ISO/IEC 42001 certifies an AI management system, but it gives no presumption of conformity under the AI Act. EN 18286, published in the Official Journal in October 2026, is the first harmonised standard and covers the quality management system that providers of high-risk AI need.

Related reading

Sources: Regulation (EU) 2024/1689, Regulation (EU) 2026/1744

Your EU AI Act programme. Start with a 30-minute briefing.

Tell us which AI systems you use or build. We will reply with a clear next step.

Book a briefingEmail us