Skip to content

EU AI Act incident reporting, on deadline.

Article 73 serious incidents, market-surveillance audit requests and Article 86 explanation requests — managed in one Disclosures Hub with live deadline countdowns and a notification chain on every record.

One Disclosures Hub for incidents, audit requests and explanations.

Every external obligation lands in one command centre. Each record is tagged to its Article, assigned its own deadline clock, and tracked through a complete notification chain — so nothing waits in an inbox.

Incidents

Art. 73

Real-Time Fraud Detection — output cascade

INC-2026-001

Critical · 2d

Clinical Decision Support — triage misclassification

INC-2026-002

Death · 10d

Biometric Access Control — false-match spike

INC-2026-003

Serious · 15d

Audit Requests

Art. 21

BaFin (DE) — Real-Time Fraud Detection Engine

DE-BAFIN-2026-0142

5d left

AEPD (ES) — CV & Recruitment Screening Tool

ES-AEPD-2026-031

3d left

AGCM (IT) — Dynamic Pricing Model

IT-AGCM-2026-008

12d left

Explanation Requests

Art. 86

CV & Recruitment Screening Tool — adverse decision

EXP-2026-004

Acknowledged

Credit Scoring Model — declined application

EXP-2026-005

Due 7d

Benefits Eligibility Classifier — appeal

EXP-2026-006

New

Serious-incident reporting to the Article 73 deadline.

The moment an incident is classified, Confir computes the Article 73 reporting deadline from its severity tier and starts the countdown — so the report reaches the authority before the window closes.

2days

Critical disruption

Widespread infringement or critical-infrastructure disruption. Report immediately, and no later than 2 days.

Art. 73(3)

10days

Fatal harm

Death of a person, once the link to the AI system is established. Report immediately, and no later than 10 days.

Art. 73(4)

15days

Serious harm

Serious harm to health, a fundamental-rights breach, or serious damage. Report immediately, and no later than 15 days.

Art. 73(2)

1

Detect

Flagged or logged the moment the incident surfaces.

2

Classify

Severity mapped to its Article 73 deadline tier.

3

Notify

Report filed to the authority before the window closes.

MSA audit requests: the cooperation dossier, assembled in one click.

A market-surveillance authority request arrives with a deadline attached. Select the scope, and Confir assembles the full cooperation dossier — in the authority's own language, with the deadline counting down until the response is filed.

  • Cooperation basis selected by your EU AI Act role.
  • Scope picker across 10+ artefact types — conformity package, FRIA, evidence, audit log, incident slice.
  • Art. 78 confidentiality and Art. 74(13) source-code carve-out distinguished automatically.
  • Real-time deadline countdown until the response is filed.

Bundesanstalt für Finanzdienstleistungsaufsicht

DE · BaFin · DE-BAFIN-2026-0142

5d remaining

Dossier scope · Real-Time Fraud Detection Engine

Conformity package
FRIA (Art. 27)
Control assessments
Evidence files
Immutable audit log
Incident slice
Risk register
Applied standards
DE · EN · FR · ES · ITExport dossier

EXP-2026-004

CV & Recruitment Screening Tool

Day 4 / 30
Scope · High-risk · Deployer

Lifecycle · append-only

Request acknowledged
Investigating decision basis
Response drafted
Responded / declined (with grounds)

Article 86 explanation requests, tracked to resolution.

When a person asks how an AI-influenced decision about them was made, Article 86 applies. Confir keeps an append-only register of every request — scoped automatically to the high-risk systems where you act as deployer, which is the only place the obligation bites.

  • Acknowledged → investigating → responded → declined — append-only.
  • Auto-scoped to high-risk systems where you act as deployer.
  • Decline flow captures the Article 86 legal grounds.
  • Linked back to the underlying control assessment.

Every detail handled: severity, deadlines, custody.

The day-2 details that make a reporting workflow defensible — severity, deadlines, multi-language, chain of custody.

Dual-Hat Incident Reporting

One submission under Art. 73 and Art. 26(5) — closes the dual-hat gap.

Incident Evidence Vault

Tamper-evident storage. Every file bound to its incident, classified by kind.

Corrective Actions

Action types, status, recipient chains and a 'Not Serious' rejection flow.

Multi-Language Dossiers

MSA dossiers and DoCs in any of the 24 EU official languages.

Live Deadline Countdowns

Deadlines on every record, in your timezone, with overdue alerts.

Severity Classifier

Multi-prong severity → automatic deadline computation.

Lead MSA Designation

Auto-selected lead MSA, multi-country coverage.

Notification Chain

Full chain of custody on the immutable audit log.

Assess your first AI system with Confir today.

Create your account, add your first AI system, and produce a full EU AI Act assessment with signed conformity documentation — in days, not months.

14-day full-access trialNo card requiredEU-hosted · GDPR Art. 28 DPA