AI risk classification.
Classification is the decision every other obligation hangs on. Article 5 rules out a small set of practices entirely. Annex III lists the high-risk areas, and Article 6(3) provides the exemption that can pull a system back out of them. Article 50 adds transparency duties for systems that interact with people. These pages walk specific systems and use cases through that sequence and record the reasoning — because a classification you cannot evidence is a classification a market surveillance authority will not accept.
74 guides
Annex III
42 guidesSection overview
Annex III High-Risk AI: The 8 Areas Explained (Article 6(2))
Annex III lists the 8 stand-alone high-risk AI areas under Article 6(2) — biometrics to justice. Deadline 2 Dec 2027. Article 6(3) filter explained.
- AI Biometric Categorisation: High-Risk or Banned?AI biometric categorisation is high-risk under Annex III point 1(b) unless it infers sensitive attributes, which Article 5(1)(g) bans. The bright line.
- AI Credit Scoring Under the EU AI Act: High-Risk ObligationsAI credit scoring is high-risk under Annex III point 5(b). Provider vs deployer duties, Art 27 FRIA, fraud-detection carve-out. Deadline: Dec 2027.
- AI Emergency Dispatch: High-Risk (Annex III)AI that triages 112 calls or prioritises ambulance and fire dispatch is high-risk under Annex III point 5(d). The trigger, obligations, and 2026 deadline.
- AI Employee Monitoring: High-Risk vs Prohibited (EU AI Act)Annex III point 4(b) makes productivity-monitoring AI high-risk. But emotion recognition in the workplace is prohibited (Art 5(1)(f)) since Feb 2025.
- AI in Critical Infrastructure: Annex III Point 2 ComplianceCritical-infrastructure AI: when it's high-risk (Annex III point 2), the obligations, the Annex VI route, and the 2 December 2027 deadline.
- AI in Education: Annex III Point 3 High-Risk ClassificationAnnex III point 3 makes admission, grading, and proctoring AI high-risk. Deadline 2 December 2027. Emotion recognition in education is prohibited.
- AI in the Administration of Justice: Annex III Point 8AI used by a judicial authority to research facts and apply law is high-risk under Annex III point 8. Most legal-tech is minimal; judicial use is the line.
- AI in Visa Applications: Annex III High-Risk ClassificationVisa-examination AI is high-risk under Annex III point 7. Art 9, 10, 14, 27 FRIA obligations apply; registration is non-public. Deadline: 2 December 2027.
- AI Polygraph & Lie Detection: High-Risk StatusAI polygraphs are high-risk under EU AI Act Annex III points 6(b) and 7(a), not prohibited like workplace emotion recognition. The €15M vs €35M line explained.
- AI Social Scoring Prohibited Under EU AI Act Article 5AI social scoring is banned under Article 5(1)(c) since 2 Feb 2025 — not high-risk. Fines reach €35M or 7%. Learn what crosses the line and what does not.
- AI Student Admission Systems: EU AI Act Annex III High-RiskAdmission AI is high-risk under Annex III point 3. Provider and deployer obligations, FRIA, discrimination risk, and the 2 December 2027 deadline.
- Annex III Point 6: Law Enforcement Risk Assessment AILaw enforcement risk assessment AI: Annex III point 6 obligations, Art 27 FRIA, non-public EU database registration, Art 5 boundary. Deadline 2 Dec 2027.
- Annex III Point 8(a): AI in Judicial Decisions — EU AI ActAnnex III point 8(a) makes judicial AI high-risk. Understand scope, ancillary-admin exclusion, Art 14 oversight, Art 27 FRIA. Deadline: 2 Dec 2027.
- Annex III: AI Exam Monitoring High-Risk Classification GuideAI exam monitoring is high-risk under EU AI Act Annex III. Provider, deployer, FRIA obligations, the emotion recognition ban, and the Dec 2027 deadline.
- Article 5(1)(a) EU AI Act: Subliminal and Manipulative AIArticle 5(1)(a) bans subliminal and manipulative AI since 2 Feb 2025. Penalty ceiling: €35M or 7%. Learn what crosses the line and what does not.
- Asylum & Migration AI: High-Risk Under Annex III Point 7AI used in asylum, migration and border control is high-risk under Annex III point 7 — FRIA, non-public registration, and a prohibited line to watch.
- Asylum AI: EU AI Act Annex III Point 7 High-Risk ObligationsAsylum AI falls under Annex III point 7 — high-risk. Deployers need Article 26 duties, Article 27 FRIA, and Article 49 registration by 2 December 2027.
- Autonomous Vehicle AI Under the EU AI Act: Annex I RouteAutonomous-vehicle AI: high-risk via the Article 6(1)/Annex I type-approval route, with integrated conformity and a 2 August 2028 deadline.
- Biometric AI Under the EU AI Act: Annex III Point 1 GuideEU AI Act biometric AI: Article 5 prohibitions, Annex III point 1 high-risk obligations, notified-body assessment under Art 43. Deadline 2 December 2027.
- Biometric AI Under the EU AI Act: High-Risk or Prohibited?Post biometric ID, sensitive categorisation and emotion recognition are high-risk (Annex III point 1) — and need a notified body. Where the bans sit.
- Crime Prediction AI: Prohibited or High-Risk EU AI Act?Is your crime-prediction AI system prohibited under Article 5 or high-risk under Annex III? Draw the line correctly — fine up to €35M/7% since Feb 2025.
- Critical Infrastructure AI: Annex III Point 2AI used as a safety component in managing critical infrastructure — water, gas, electricity, road traffic — is high-risk under Annex III point 2.
- Elections and Democratic Processes AI: EU AI Act Annex IIIAI systems influencing elections or voting behaviour are high-risk under EU AI Act Annex III point 8(b). Deadline: 2 Dec 2027. Fines up to €15M or 3%.
- Emotion Recognition in Education: Prohibited, Not High-RiskEmotion recognition in education is prohibited under EU AI Act Article 5(1)(f), not high-risk. The ban applies since 2 Feb 2025; fines up to €35M or 7%.
- Employment Decision AI — EU AI Act Annex III High-Risk GuidePerformance monitoring, task allocation, and termination AI are high-risk under Annex III point 4(b). Art 26(7) worker notice, Dec 2027 deadline.
- Essential Public Services AI: High-Risk Under the EU AI ActAI deciding eligibility for public benefits — granting, reducing or revoking them — is high-risk (Annex III 5(a)). A FRIA is mandatory for deployers.
- EU AI Act Annex III Point 7: Border Control & Migration AIAnnex III point 7 makes border and migration AI high-risk. Understand scope, the Art 5 prohibited boundary, FRIA, and the 2 December 2027 deadline.
- EU AI Act Article 5(1)(f): Emotion Recognition ProhibitedWorkplace and education emotion recognition is prohibited under Article 5(1)(f) of the EU AI Act since 2 February 2025. Fine ceiling: €35M or 7%.
- Evidence-Reliability AI: High-Risk (Annex III)AI evaluating evidence reliability in criminal cases is high-risk under Annex III point 6(c). Scope, actor test, obligations, 2 August 2026 deadline caveat.
- Facial Recognition in Public Spaces: EU AI Act RulesReal-time law enforcement facial ID is banned under Art 5(1)(h) since Feb 2025. Post-event biometric ID is Annex III high-risk — deadline 2 Dec 2027.
- Insurance Pricing AI Under EU AI Act: Life & Health GuideAI for life and health insurance pricing is high-risk under Annex III point 5(c). Provider, deployer, and FRIA obligations apply from 2 December 2027.
- Is Biometric Verification High-Risk? (EU AI Act)One-to-one biometric verification — confirming a person is who they claim — is excluded from Annex III high-risk. Identification one-to-many is not.
- Is Exam-Scoring AI High-Risk Under the EU AI Act?Exam-scoring, admissions and proctoring AI is high-risk under Annex III point 3 — but emotion recognition in education is prohibited (Art 5(1)(f)).
- Is Worker-Management AI High-Risk Under the EU AI Act?AI deciding promotions, terminations, task allocation or performance scoring is high-risk (Annex III pt 4(b)); emotion recognition at work is prohibited.
- Law Enforcement AI: High-Risk or Prohibited?Re-offending risk scoring, AI polygraphs and investigative profiling are high-risk (Annex III pt 6); offending predicted solely by profiling is prohibited.
- Medical Imaging AI: EU AI Act Classification & ObligationsMedical imaging AI is high-risk via Article 6(1) + MDR/IVDR (Annex I), not Annex III. Obligations for vendors and hospitals. Deadline: 2 August 2028.
- Mortgage & Loan AI: High-Risk Under EU AI Act Annex IIIMortgage and loan AI is high-risk under Annex III point 5(b). Provider and deployer obligations, FRIA, GDPR Art 22, and the 2 Dec 2027 deadline explained.
- Predictive Policing AI: Prohibited or High-Risk?Predictive policing AI that predicts offending solely on profiling is prohibited (Art 5(1)(d)); risk tools supporting human judgment are high-risk.
- Recruitment AI and CV Screening: EU AI Act High-Risk GuideAI recruitment screening is Annex III high-risk under the EU AI Act. Provider and deployer obligations, Art 6(3) filter, and the 2 December 2027 deadline.
- Social Benefits AI: Annex III Point 5(a) Compliance GuideSocial benefits eligibility AI is high-risk under EU AI Act Annex III point 5(a). Public-authority deployers must run a FRIA. Deadline: 2 December 2027.
- Surgical Robot AI and the EU AI Act: MDR ComplianceSurgical robot AI is high-risk via Article 6(1) + Annex I (MDR). AI Act duties fold into the MDR notified-body audit. Compliance deadline: 2 August 2028.
AI Risk Classification
16 guidesSection overview
EU AI Act Risk Classification: The 4 Tiers Explained (2026)
EU AI Act risk tiers explained: Art 5 bans, Annex III high-risk (deadline 2 Dec 2027), Art 50 transparency, minimal-risk. Art 6(3) exemption filter covered.
- AI Chatbot Risk Classification Under the EU AI ActClassify your chatbot under the EU AI Act: limited-risk (Article 50, Aug 2026), high-risk (Annex III), or prohibited (Article 5). Penalties included.
- Article 5 Prohibited Practices: Unacceptable-Risk AIArticle 5 of the EU AI Act bans 8 AI practices since 2 Feb 2025. Fines reach €35M or 7% of turnover. Learn what's prohibited and where the traps lie.
- Article 6(3) Exemption: When Annex III AI Isn't High-RiskAn Annex III system escapes high-risk under Article 6(3) if it meets one of four conditions. But profiling is always high-risk, and you still register.
- Classifying an LLM-Based System Under the EU AI ActHow to classify an LLM-based system under the EU AI Act: GPAI model (Art 53), system risk tier (Art 6 + Annex III), and your role as provider or deployer.
- EU AI Act High-Risk Checklist (2026)A four-step checklist to decide if your AI is high-risk under the EU AI Act: prohibited, Annex III, safety component, then the Article 6(3) filter.
- GPAI Model Risk Under EU AI Act: Chapter V ExplainedGPAI models sit in Chapter V, separate from the four risk tiers. Article 51 systemic risk, Article 53 baseline obligations, and what downstream users owe.
- High-Risk AI Systems: EU AI Act Obligations & DeadlinesTwo routes to high-risk status under Article 6 of Regulation (EU) 2024/1689. Full obligation stack, Art 6(3) filter, deadlines: 2 Dec 2027 and 2 Aug 2028.
- How to Classify Your AI System Under the EU AI ActA step-by-step way to classify any AI system under the EU AI Act: intended purpose, prohibited screen, Annex III, the Article 6(3) filter, then your role.
- Is My AI System High-Risk? EU AI Act Classification TestIs your AI system high-risk under the EU AI Act? Five-step test: Art 5 ban, Art 6(1) Annex I, Annex III, Art 6(3) exemption, Art 50. Deadline: 2 Dec 2027.
- Is Your AI High-Risk? The Article 6 Decision TreeSix-node decision tree to classify any AI system under EU AI Act Article 6. Prohibited, high-risk, limited, or minimal — with deadlines and penalties.
- Limited-Risk AI: Article 50 Transparency ObligationsArticle 50 transparency duties apply from 2 August 2026. Chatbot disclosure, synthetic-content marking, deepfake labelling: who owes what and when.
- Limited-Risk AI: Examples and Article 50 DutiesLimited-risk AI means transparency duties under Article 50 — chatbots, synthetic content, deepfakes. Disclosure, not a heavy regime. Examples and dates.
- Minimal-Risk AI Under the EU AI ActMost AI is minimal-risk under the EU AI Act — no mandatory obligations beyond Article 4 literacy. What qualifies, what applies, and why to document it.
- Minimal-Risk AI Under the EU AI Act: Obligations & ExamplesMinimal-risk AI carries no mandatory EU AI Act system obligations — but Article 4 AI literacy still applies. Learn what qualifies and what to document.
- The EU AI Act's Prohibited Practices (Article 5)The eight prohibited AI practices under Article 5 of the EU AI Act, in force since 2 Feb 2025. Fines up to €35M or 7%, plus a table and example.
Use Cases
6 guidesSection overview
AI Use Cases and the EU AI Act: Classification by Purpose
How the EU AI Act classifies AI by use case, not technology: Article 6 and Annex III routing, the Art 6(3) filter, and why most use cases are limited-risk (2 Aug 2026).
- AI Content Moderation and the EU AI ActAI content moderation is typically minimal-risk under the EU AI Act — not Annex III. The DSA governs platforms. Article 50 applies from August 2026.
- AI Fraud Detection and the EU AI Act: Classification GuideIs AI fraud detection high-risk under the EU AI Act? Annex III 5(b) carves it out of the creditworthiness category. Here is what actually applies.
- AI Recommendation Engines and the EU AI ActMost AI recommendation engines are minimal-risk under the EU AI Act — no conformity assessment required. Learn when Annex III or Article 5 changes that.
- AI Summarizer EU AI Act: Classification GuideAI summarizers are minimal-risk under the EU AI Act. Learn when Article 50 marking applies and what changes if your tool feeds a high-risk process.
- Customer-Support Chatbots and the EU AI ActMost customer-support chatbots are limited-risk under the EU AI Act. Your core duty is Article 50(1) AI disclosure — applies from 2 August 2026.
AI Risks
4 guides- AI Bias and Discrimination Risk Under the EU AI ActAI bias under the EU AI Act: how Articles 9, 10, 14 and 15 address algorithmic discrimination, plus the mitigation lifecycle for high-risk systems.
- AI Data Leakage Risk: EU AI Act and GDPR RequirementsSix AI data-leakage vectors, the Article 15 and GDPR obligations they trigger, and the controls that close the gap. Updated for the Digital Omnibus.
- AI Hallucination Risk Under the EU AI ActAI hallucination under the EU AI Act: Articles 9, 13, 14 and 15, the 2 December 2027 deadline, and mitigations including RAG and human oversight design.
- Prompt Injection Under the EU AI Act: Article 15 CompliancePrompt injection under the EU AI Act: how Article 15, Article 9, and Article 14 apply to high-risk systems. Mitigations, agentic risk, and 2027 deadlines.
AI Risk Register
2 guidesSection overview
AI Risk Register: Template & How-To Guide (EU AI Act Art. 9)
Article 9 EU AI Act requires a living risk register. Recommended fields, update cadence, and a worked example for providers and deployers. Dec 2027.
AI Risk Assessment
1 guideSection overview
AI Risk Assessment Under the EU AI Act: Article 6 & 9
AI risk assessment under the EU AI Act runs in two layers: Article 6 classification first, then the Article 9 risk management system. Step-by-step guide.
Classify, document and evidence — in one place
Confir turns Article 6 and Annex III into a decision you can defend, with the technical documentation and audit trail attached.
Start free trial →