Table of contents
The Two-Gate Classification System
The EU AI Act classifies AI systems as high-risk through two distinct pathways defined in Article 6.
Gate 1 · Article 6(1): AI systems that are themselves a safety component of a product covered by Union harmonisation legislation listed in Annex I (machinery, medical devices, vehicles, aviation, etc.), or are themselves such a product, and must undergo third-party conformity assessment.
Gate 2 · Article 6(2): AI systems listed in Annex III, across 8 specific domains. This is where most enterprise AI systems fall.
The 8 Annex III Domains
If your AI system falls into any of these domains, it is presumed high-risk:
The Article 6(3) Exception
Even if your system falls under Annex III, it may be exempt from high-risk classification if it does not pose a significant risk of harm to health, safety, or fundamental rights, and meets one of these four conditions:
- It performs a narrow procedural task
- It is intended to improve the result of a previously completed human activity
- It detects decision-making patterns without replacing human assessment
- It performs a preparatory task to an assessment relevant to the use cases listed in Annex III
Obligations for High-Risk Providers
If classified high-risk, Articles 9 through 15 impose mandatory obligations:
Penalties for Non-Compliance
For high-risk AI systems, penalties can reach 15 million euros or 3% of global annual turnover (Art. 99(4)), whichever is higher. For prohibited practices (Article 5), penalties rise to 35 million euros or 7%.
Post-Digital Omnibus (adopted 29 June 2026): Annex III high-risk obligations (EP enumeration: biometrics, critical infrastructure, education, employment, law enforcement, border management; non-exhaustive) apply from 2 December 2027. Article 50 transparency obligations not affected by the omnibus delay (per EP IPR42011 + Reg. 2024/1689 baseline): 2 August 2026. The conformity assessment process for high-risk systems can take several months.
Not sure if your AI system is high-risk? The free Sprinkling Act diagnostic classifies your system in minutes, article by article.
Sources
- [1]EUR-Lex (July 12, 2024) · Regulation (EU) 2024/1689 — Artificial Intelligence Act (full text) eur-lex.europa.eu/eli
- [2]EU AI Act · Article 6 — Classification Rules for High-Risk AI Systems artificialintelligenceact.eu/article
- [3]EU AI Act · Annex III — High-Risk AI Systems Referred to in Article 6(2) artificialintelligenceact.eu/annex
- [4]
- [5]
- [6]EU AI Act · Articles 10–15 — Requirements for High-Risk AI Systems artificialintelligenceact.eu/article
- [7]
Six questions on your own uses, two minutes, no account. Your answers come back to you as a text you can take away — nothing is sent to us.
Take the checkSprinkling Act examines one workflow already running on AI: how you describe it, what the elements you provide establish, and the distance between the two. Before you extend, renew or change it.