The RegulatoryBridge EU AI Act Risk Classifier helps businesses identify potential regulatory obligations and understand the next steps towards responsible AI governance.
Start your assessment to explore your AI system's potential risk classification.
Реализует ли система ИИ какие-либо из следующих запрещённых практик?
How Does the EU AI Act Classify AI Systems?
The EU AI Act follows a risk-based approach. The obligations that apply depend on the characteristics and intended use of an AI system.
Prohibited AI practices
Certain practices are prohibited because they pose unacceptable risks to safety, fundamental rights or human dignity.
High-risk AI systems
Certain systems used in areas such as employment, education, essential services, critical infrastructure and regulated products may face extensive compliance requirements.
Transparency obligations
Certain AI systems must meet disclosure or content-identification requirements, including applicable rules for AI interactions and AI-generated or manipulated content.
Minimal or no risk
Many AI applications fall outside the Act's high-risk requirements, although other applicable legal obligations may still apply.
These categories are a practical starting point. The exact obligations depend on the applicable provisions, the system's intended purpose and the organisation's role.
How the AI Act Risk Assessment Works
Identify prohibited practices
The assessment first checks whether the system may involve an AI practice prohibited under Article 5 of the EU AI Act. A potentially prohibited practice requires careful legal review before the system is developed, deployed or used.
Assess high-risk classification
If no prohibited practice is identified, the assessment considers whether the system may qualify as high-risk under Article 6 and the relevant provisions of Annex I or Annex III.
Review transparency requirements
The assessment considers whether the system may trigger specific transparency obligations, such as informing people that they are interacting with AI or meeting applicable requirements for certain AI-generated content.
Understand potential next steps
Based on your answers, the tool provides a preliminary classification and highlights areas that may require further assessment, documentation or compliance planning.
What Does High-Risk AI Classification Mean?
Where an AI system is classified as high-risk and the relevant obligations apply, the organisation may need to address requirements relating to:
- Risk management and mitigation
- Data quality and data governance
- Technical documentation and record-keeping
- Transparency and instructions for use
- Human oversight
- Accuracy, robustness and cybersecurity
- Quality management and conformity assessment
- Registration, monitoring and incident reporting, where applicable
The requirements differ according to the system's classification and the organisation's role, including whether it acts as a provider, deployer, importer or distributor.
Who Should Use This AI Act Classifier?
The tool is designed for:
- AI developers and technology providers
- Businesses deploying third-party AI solutions
- Compliance, privacy and legal teams
- Risk and information security professionals
- Product managers and AI governance leaders
- Organisations assessing AI use across European operations
Why AI Risk Classification Matters
Understanding your AI system's likely classification early can help your organisation identify potential obligations, allocate compliance resources and incorporate governance controls into the development and deployment lifecycle.
A structured assessment can also help identify when specialist legal or technical review is appropriate. Classification should be revisited when the system's intended purpose, functionality, deployment context or applicable regulatory requirements change.
Frequently Asked Questions
What is the EU AI Act Risk Classifier?
It is a preliminary assessment tool that helps organisations evaluate an AI system against relevant risk categories under the EU AI Act. Its result is an initial indication, not a binding legal determination.
Does every AI system qualify as high-risk?
No. High-risk classification depends on the applicable legal criteria, intended purpose and use. Many AI systems are not classified as high-risk, although they may still be subject to other AI Act provisions or other laws.
What happens if my AI system may be prohibited?
Do not rely on the automated result alone. Review the relevant Article 5 provision and obtain appropriate legal advice before proceeding with the potentially prohibited activity.
What obligations apply to high-risk AI systems?
Depending on the system and applicable implementation dates, requirements may include risk management, data governance, technical documentation, logging, human oversight, cybersecurity, conformity assessment and post-market monitoring.
Does a low-risk result mean my AI system is fully compliant?
No. A low-risk classification does not automatically establish compliance with the entire EU AI Act or other applicable laws. Transparency, AI literacy, data protection, product safety and other requirements may still be relevant.
Is the classifier a substitute for legal advice?
No. It provides preliminary guidance based on the information supplied. A complete assessment may require review of the system's intended purpose, technical documentation, deployment context and applicable legal provisions.
Assess Your AI Governance Readiness
Understanding your AI system's risk category is an important first step. RegulatoryBridge can help your organisation evaluate potential obligations, identify governance gaps and develop a structured approach to AI compliance.
Contact RegulatoryBridge to discuss your EU AI Act assessment and AI governance requirements.
Contact RegulatoryBridge