Articles and annexes.
A reference walk-through of the Regulation itself, article by article and annex by annex. Article 6 and Annex III on classification, Article 9 on risk management, Article 11 and Annex IV on technical documentation, Article 27 on the fundamental rights impact assessment, Article 73 on serious incident reporting. Each page states what the text actually requires and what satisfying it looks like in evidence.
44 guides
EU AI Act
42 guides- EU AI Act Annex III: High-Risk AI Use Cases & ObligationsThe 8 Annex III high-risk AI areas: biometrics, credit scoring, recruitment, law enforcement. Obligations, the Art 6(3) filter, and the 2 Dec 2027 deadline.
- EU AI Act Annex IV: Technical Documentation ContentsAnnex IV defines nine mandatory sections for high-risk AI technical docs under EU AI Act 2024/1689. Provider deadline: 2 Dec 2027. Penalties: €15M or 3%.
- EU AI Act Annex V: Declaration of Conformity ContentsAnnex V sets out the 7 required elements of the EU Declaration of Conformity (Article 47). Element guide, skeleton DoC, and 2 December 2027 deadline.
- EU AI Act Article 10: Data Governance for High-Risk AIArticle 10 EU AI Act: data governance rules for training, validation and testing datasets — bias, representativeness, quality. Deadline 2 December 2027.
- EU AI Act Article 11: Technical Documentation (Annex IV)Article 11 requires providers to draw up an Annex IV technical file before deploying high-risk AI. Nine sections, 10-year retention. Deadline: 2 Dec 2027.
- EU AI Act Article 12: Logging Requirements ExplainedArticle 12 requires high-risk AI to log events automatically. Art 12(3) biometrics rules, provider vs deployer retention, and the 2 Dec 2027 deadline.
- EU AI Act Article 13: Transparency for DeployersArticle 13 EU AI Act: providers of high-risk AI must supply deployers instructions for use before deployment. Content requirements and Dec 2027 deadline.
- EU AI Act Article 14: Human Oversight ExplainedArticle 14 EU AI Act requires human oversight of all high-risk AI. Five obligations, deployer duties under Article 26, and the 2 December 2027 deadline.
- EU AI Act Article 15: Accuracy, Robustness and CybersecurityArticle 15 EU AI Act: accuracy metrics, adversarial robustness, feedback loops, and cybersecurity for high-risk AI. Obligation from 2 December 2027.
- EU AI Act Article 16: Provider Obligations ExplainedArticle 16 lists 13 provider obligations for high-risk AI: QMS, technical file, CE marking, DoC, registration. Deadline 2 Dec 2027. Penalties €15M/3%.
- EU AI Act Article 17: QMS for High-Risk AI ProvidersArticle 17 of Regulation (EU) 2024/1689 requires high-risk AI providers to document a QMS covering 13 mandatory elements. Deadline: 2 December 2027.
- EU AI Act Article 18: Keeping DocumentationArticle 18 makes high-risk AI providers keep the technical file, QMS docs, notified-body decisions and EU declaration at authorities' disposal for 10 years.
- EU AI Act Article 2: Scope & Who It Applies ToEU AI Act Article 2 scope: providers, deployers, and non-EU actors whose outputs reach the EU. Exclusions, worked examples, and updated 2027 deadlines.
- EU AI Act Article 20: Corrective ActionsArticle 20 EU AI Act: a provider that suspects a high-risk AI system is non-conforming must correct, withdraw, disable or recall it. Penalties €15M/3%.
- EU AI Act Article 21: Cooperation With AuthoritiesArticle 21 EU AI Act: on a reasoned request, high-risk AI providers hand over conformity docs in an EU official language plus log access. €15M/3% fines.
- EU AI Act Article 22: Authorised RepresentativeArticle 22 EU AI Act: non-EU providers of high-risk AI must appoint an EU authorised representative by written mandate before market placement. €15M penalties.
- EU AI Act Article 23: Importer Obligations ExplainedArticle 23 EU AI Act: pre-market verification duties for importers of high-risk AI, 10-year record retention, and €15M/3% penalties from 2 Dec 2027.
- EU AI Act Article 25: AI Value Chain RolesHow EU AI Act Article 25 turns a deployer, distributor or importer into a provider: the three trigger conditions and the original provider's cooperation duties.
- EU AI Act Article 26: Deployer Obligations ExplainedArticle 26 of the EU AI Act sets eight obligations for deployers of high-risk AI systems. Understand what applies from 2 December 2027 and what to do now.
- EU AI Act Article 27: Fundamental Rights Impact AssessmentEU AI Act Article 27 requires public bodies and credit/insurance deployers to complete a FRIA before first use. Scope, content, and Dec 2027 deadline.
- EU AI Act Article 3: Key Definitions ExplainedArticle 3 of the EU AI Act defines AI system, provider, deployer, and GPAI model. Understand your role and obligations under Regulation (EU) 2024/1689.
- EU AI Act Article 4: AI Literacy Obligations ExplainedEU AI Act Article 4 requires AI literacy from providers and deployers since 2 Feb 2025. Scope, proportionality factors, records and a worked example.
- EU AI Act Article 40: Harmonised StandardsEU AI Act Article 40 presumes a high-risk system compliant if it conforms to harmonised standards. How the presumption works and why it is not yet usable.
- EU AI Act Article 41: Common SpecificationsEU AI Act Article 41 lets the Commission adopt common specifications when harmonised standards fall short. How the fallback presumption of conformity works.
- EU AI Act Article 43: Conformity Assessment for High-Risk AIEU AI Act Article 43 sets the pre-market gate for high-risk AI. Learn which conformity route applies — Annex VI or Annex VII — and what each requires.
- EU AI Act Article 46: Derogation ExplainedArticle 46 lets a market surveillance authority authorise a high-risk AI system without conformity assessment, on four narrow grounds and only temporarily.
- EU AI Act Article 47: EU Declaration of ConformityArticle 47 requires providers of high-risk AI systems to draw up an EU Declaration of Conformity (Annex V), retained 10 years. Deadline: 2 December 2027.
- EU AI Act Article 48: CE Marking for AIEU AI Act Article 48 governs CE marking for high-risk AI: affix it visibly, legibly and indelibly, or machine-readable for digital systems, after Article 47.
- EU AI Act Article 49: EU Database Registration (2027)Article 49 requires providers of high-risk Annex III AI systems to register in the EU database before market placement. Deadline: 2 December 2027.
- EU AI Act Article 5: The Eight Prohibited AI PracticesArticle 5 bans eight AI practices outright — in force since 2 Feb 2025. Fines reach €35M or 7% of turnover. Learn all eight prohibitions and the SME traps.
- EU AI Act Article 50: AI Transparency Rules (2026)Article 50 EU AI Act: chatbot disclosure, synthetic-content marking, deepfake rules, and emotion-recognition notices. Applies from 2 August 2026.
- EU AI Act Article 51: GPAI Systemic Risk ClassificationArticle 51 classifies GPAI models as systemic risk: 10²⁵ FLOP presumption or Commission decision. In force 2 August 2025. Fines up to €15M or 3%.
- EU AI Act Article 52: Systemic-Risk GPAI NotificationArticle 52 governs GPAI systemic-risk notification: two-week window at 10²⁵ FLOPs, rebuttal rights, Commission-initiated designation, reassessment.
- EU AI Act Article 53: All GPAI Provider ObligationsEU AI Act Article 53: what every GPAI provider must do — Annex XI docs, Annex XII integrator info, a copyright policy, a public training-data summary.
- EU AI Act Article 6: High-Risk AI Classification RulesArticle 6 of the EU AI Act: two routes to high-risk classification — Annex I safety components and Annex III listed areas. Deadlines 2 Dec 2027 / 2 Aug 2028.
- EU AI Act Article 62: SME Support MeasuresEU AI Act Article 62 gives SMEs priority sandbox access, tailored support, a dedicated authority channel, and proportionate conformity-assessment fees.
- EU AI Act Article 71: The EU DatabaseArticle 71 of the EU AI Act builds the EU database for high-risk AI: who registers, the public part, the secure non-public section, and the Article 49 link.
- EU AI Act Article 72: Post-Market Monitoring (2026)Article 72 EU AI Act requires high-risk AI providers to run post-market monitoring. Plan structure, Article 9 linkage, and the 2 December 2027 deadline.
- EU AI Act Article 73: Serious Incident ReportingEU AI Act Article 73: high-risk AI providers must report serious incidents within 15 days (general), 10 days (death), or 2 days (critical disruption).
- EU AI Act Article 8: High-Risk AI Requirements ExplainedArticle 8 activates Articles 9–15 for high-risk AI systems. Understand each requirement, the state-of-the-art standard, and the 2 December 2027 deadline.
- EU AI Act Article 9: Risk Management System GuideArticle 9 EU AI Act requires a continuous risk management system for high-risk AI. Covers the 4 mandatory steps, residual-risk test, and Dec 2027 deadline.
- EU AI Act Article 99: Penalties and Fine TiersArticle 99 EU AI Act: €35M/7%, €15M/3%, €7.5M/1% fine tiers explained. SME cap, Article 101 GPAI fines, worked examples. In force from 2 August 2025.
Classify, document and evidence — in one place
Confir turns Article 6 and Annex III into a decision you can defend, with the technical documentation and audit trail attached.
Start free trial →