Tools and comparisons.
Every tool you already run — the translation engine, the CV screener, the support chatbot, the forecasting model — has a place in the EU AI Act's risk tiers. This section works through them one at a time: what the system does, which Article 6 test it meets or fails, whether Annex III applies, and what obligations follow for you as provider or deployer. Where two tools or two frameworks are routinely confused, there is a direct comparison rather than a feature grid.
65 guides
AI Inventory
58 guidesSection overview
AI System Inventory for EU AI Act Compliance
Build an EU AI Act-compliant AI inventory: discover shadow AI, classify each system under Article 6, and prepare for Art 49 registration by 2 Dec 2027.
- Adobe Firefly & the EU AI Act: Article 50 MarkingAdobe Firefly is not high-risk under the EU AI Act. The real duty is Article 50 content marking and disclosure, applying from 2 December 2026.
- Asana AI & the EU AI Act: A Deployer's GuideAsana AI is minimal risk for most companies. The real duties: Article 4 literacy, light Article 50 disclosure, and one path that reaches Annex III.
- Atlassian Intelligence & the EU AI ActAtlassian Intelligence in Jira and Confluence — summaries, search, writing help — is minimal-risk under the EU AI Act. The duty is Article 4 AI literacy.
- AWS Bedrock and the EU AI Act: Classify What You BuildBuild on AWS Bedrock? Under the EU AI Act, you are likely the provider (Art 16). Classify by use: high-risk Annex III by Dec 2027, chatbots by Aug 2026.
- AWS SageMaker & the EU AI Act ComplianceTrain your own models on AWS SageMaker? Under the EU AI Act you are the provider (Article 16) — no upstream GPAI vendor, so Article 10, 12 and 43 fall to you.
- Azure OpenAI and the EU AI Act: Classify by UseAzure OpenAI: build under your name and Article 16 makes you the provider. Your risk tier depends on what your system does — classify by use.
- Canva (Magic Studio) & the EU AI Act: Mark Your OutputCanva sits at minimal risk under the EU AI Act, but published AI-generated designs trigger Article 50 marking and disclosure from 2 Dec 2026.
- ChatGPT & EU AI Act: Classify by Use, Not by NameChatGPT EU AI Act risk tier depends on how you deploy it: minimal, Art 50 limited, or Annex III high-risk. GDPR duties and the 2 Dec 2027 deadline covered.
- Clari & the EU AI Act: Where Call Analytics Turns High-RiskClari is minimal risk to deploy. Using its call analytics to evaluate staff hits Annex III high-risk; emotion inference is prohibited under Art 5(1)(f).
- Claude (Anthropic) and the EU AI Act: Classify by UseClaude (Anthropic) and the EU AI Act: risk tier depends on your deployment, not the model. GPAI obligations (Art 53), Art 50 transparency from Aug 2026.
- Copilot Studio & the EU AI Act ComplianceCopilot Studio lets staff build custom agents — and building one under your name can make your organisation the provider. Classify by purpose; govern shadow AI.
- Copy.ai & the EU AI Act: One Real Duty — Content MarkingCopy.ai is minimal risk under the EU AI Act. The duty that bites: marking published synthetic content under Article 50, applicable from 2 December 2026.
- Cursor AI & the EU AI Act: Compliance GuideCursor AI is almost always minimal risk under the EU AI Act, not Annex III. Article 4 literacy, code confidentiality and the shadow-AI gap for deployers.
- Databricks & the EU AI Act: The Platform Isn't the SystemDatabricks has no risk tier of its own. The AI system you train and ship is classified by use under Art 6; shipping it makes you the provider.
- DeepL & the EU AI Act: Translation Is Minimal-RiskDeepL machine translation is minimal-risk under the EU AI Act — translation is not an Annex III use. The real layer is GDPR and confidentiality.
- Dropbox Dash & the EU AI Act: Search Is Minimal, GDPR BitesDropbox Dash is minimal-risk for internal search and answers — Article 50 applies if it's customer-facing, and GDPR data governance comes first for deployers.
- ElevenLabs & the EU AI Act: Compliance GuideElevenLabs EU AI Act compliance turns on Article 50: deployers disclose AI-generated audio, providers mark voice output machine-readably, plus clone consent.
- Figma AI & the EU AI Act: A Design Tool, Not a Risk TierFigma AI (First Draft, Make) is minimal-risk productivity under the EU AI Act. Article 50 only bites when output is customer-facing. Classify by use.
- Fireflies.ai & the EU AI Act: Minimal Risk, Two Red LinesFireflies.ai is minimal risk under the EU AI Act for note-taking. Two red lines: worker monitoring goes high-risk; emotion inference is prohibited.
- Gamma & the EU AI Act: Generative Decks and Article 50Gamma's AI deck and document generation is minimal-risk under the EU AI Act. Publish externally and Article 50 content marking applies from 2 Dec 2026.
- GitHub Copilot Under the EU AI Act: Risk Classification 2026GitHub Copilot is minimal risk under the EU AI Act — not Annex III. Article 4 literacy, GPAI context, and real IP and security governance explained.
- Glean AI & the EU AI Act: Compliance GuideGlean is enterprise RAG search over your own data, almost always minimal risk under the EU AI Act. The real exposure is permission-mirroring and access control.
- Gong & the EU AI Act: Compliance GuideGong is not high-risk in ordinary sales use. The real EU AI Act exposure is call-recording consent, confidentiality and the biometrics line, not Annex III.
- Google Gemini and the EU AI Act: Obligations by Use CaseGemini is a GPAI model — your compliance depends on how you deploy it. Article 50 disclosure from Aug 2026; high-risk Annex III obligations by Dec 2027.
- Grammarly & the EU AI Act: Compliance GuideGrammarly is a minimal-risk AI writing assistant under the EU AI Act. The real deployer duties: Article 4 literacy, data governance, and one narrow Article 50.
- Harvey AI & the EU AI Act: Compliance GuideHarvey AI is a legal assistant for research, drafting and review — generally minimal risk under the EU AI Act. Real duties: Article 4 literacy, privilege.
- HireVue EU AI Act Compliance: High-Risk Deployer GuideHireVue is high-risk under EU AI Act Annex III point 4(a). Deployer duties, the Art 5(1)(f) emotion ban, and steps to comply by 2 December 2027.
- HubSpot AI & the EU AI Act: Minimal Risk, Two Real DutiesHubSpot AI and Breeze sit at minimal risk under the EU AI Act. The duties that bite: Article 50 chatbot disclosure, content-marking, and GDPR profiling.
- Intercom Fin & the EU AI Act: ComplianceIntercom Fin resolves support queries autonomously on third-party GPAI. For deployers that means Article 50 disclosure, Article 4 literacy, and data governance.
- Jasper AI & the EU AI Act: Compliance GuideJasper is minimal-to-limited risk under the EU AI Act. The real deployer duties: Article 4 literacy, Article 50 content marking, brand-data governance.
- Lovable & the EU AI Act: Builder Minimal, the App Is NotLovable's app generation is minimal risk like a code assistant. The app you ship is classified by use, and you are its provider. Art 50 chatbots covered.
- Meta Llama Under the EU AI Act: GPAI Model and System GuideSelf-hosting Llama? Two compliance layers: GPAI Chapter V (Meta) and Article 6 for your system. Deadlines, roles, and obligations under the EU AI Act.
- Microsoft 365 Copilot: EU AI Act Risk & Deployer DutiesM365 Copilot defaults to minimal risk. Classify by use: Article 50 disclosure from Aug 2026; Annex III high-risk for employment screening or credit.
- Microsoft Azure AI Services Under the EU AI ActAzure AI covers many services, each with its own risk profile. Classify Azure OpenAI, Face, Vision, and Language by use under Regulation (EU) 2024/1689.
- Midjourney & the EU AI Act: Compliance GuideMidjourney EU AI Act compliance turns on Article 50: not high-risk, but deployers disclose deepfake images and providers mark output from 2 December 2026.
- Miro AI & the EU AI Act: A Deployer's GuideMiro AI is minimal risk for a deployer. The only real duties: Article 4 AI literacy, an Article 50 check on externally published output, an inventory entry.
- Mistral AI Compliance EU AI Act: Deployer GuideMistral AI compliance under the EU AI Act: Mistral carries GPAI duties (Arts 51-55); your obligations depend on your use case and risk tier, not the EU origin.
- monday.com AI & the EU AI Act: A Deployer's Guidemonday.com AI is minimal risk in normal use. The duties that matter: Article 4 literacy, a light Article 50 disclosure, and the one path to Annex III.
- n8n AI & the EU AI Act: Classify the Workflow, Not the Tooln8n is minimal risk as a tool. Each AI workflow is classified by what it does: a CV-screening flow is Annex III high-risk; a chatbot triggers Article 50.
- NotebookLM & the EU AI Act: Minimal-Risk Internal ResearchGoogle NotebookLM is minimal risk for internal research. The real duties are GDPR and confidentiality on uploaded files, plus Art 50 if you publish.
- Notion AI & the EU AI Act: Compliance GuideNotion AI is almost always minimal or limited risk for a deployer. The real duties: Article 4 AI literacy, light Article 50 transparency, shadow-AI control.
- OpenAI API Under the EU AI Act: Provider Role & RiskBuild on the OpenAI API? Under the EU AI Act you are likely the provider (Art 16) of what you ship. Classify by use — high-risk deadline 2 Dec 2027.
- Otter.ai & the EU AI Act: Compliance GuideOtter.ai meeting transcription is minimal risk under the EU AI Act. The real exposure is recording consent, confidentiality, retention and Article 4 literacy.
- Perplexity AI & the EU AI Act: CompliancePerplexity AI under the EU AI Act: your duties turn on the use case, not the tool. Most internal research is minimal risk; Art 50 applies if answers go public.
- Power BI Copilot & the EU AI Act CompliancePower BI Copilot generates reports, DAX and narratives. Ordinary BI is minimal or limited risk under the EU AI Act, not Annex III high-risk. See the duty map.
- Runway & the EU AI Act: Compliance GuideRunway EU AI Act compliance turns on Article 50: deployers disclose AI-generated video, and providers mark outputs machine-readably from 2 December 2026.
- Salesforce Einstein and the EU AI Act: Classify by UseSalesforce Einstein risk tier depends on use, not product. Learn when Einstein is minimal, limited, or high risk and what deployers owe by Dec 2027.
- SAP Joule & the EU AI Act: Classify by ModuleSAP Joule is classified module by module under the EU AI Act: ERP automation is minimal-risk; the HR module can be Annex III high-risk.
- ServiceNow AI & the EU AI Act: ITSM Risk & DutiesServiceNow AI (Now Assist) for ITSM is usually minimal risk under the EU AI Act. See the three edges — HR use (Annex III pt 4), custom skills (Art 25), data.
- Slack AI & the EU AI Act: Classify by UseSlack AI search and summaries are minimal-risk under the EU AI Act. The watch-item is worker monitoring (Annex III 4(b)); emotion inference is prohibited.
- Snowflake Cortex & the EU AI Act ComplianceBuild with Snowflake Cortex LLM functions or ML? Under the EU AI Act you are the provider (Article 16). Governed data helps Article 10, never replaces it.
- Synthesia & the EU AI Act: Compliance GuideSynthesia EU AI Act compliance hinges on Article 50: deployers disclose synthetic avatar video, providers mark outputs machine-readably from 2 December 2026.
- Vertex AI & the EU AI Act ComplianceVertex AI is infrastructure — the EU AI Act attaches to the AI system you build on it. Classify by intended purpose, fix your role, and own Article 12 logging.
- Workday AI and the EU AI Act: HR High-Risk Compliance GuideWorkday recruiting and performance AI are high-risk under Annex III point 4. Art 26(6) logs, Art 26(7) worker notice required. Deadline: 2 December 2027.
- Writer & the EU AI Act: Minimal Risk, Classify by UseWriter (Palmyra) sits at minimal risk under the EU AI Act. Article 50 applies only to published output; GDPR governs the data you enter. Classify by use.
- Zendesk AI & the EU AI Act: ComplianceZendesk AI is usually limited-risk under the EU AI Act. Real duties: Article 50 disclosure, Article 4 AI literacy, data governance. See the one high-risk edge.
- Zoom AI Companion & the EU AI Act: Classify by UseZoom AI Companion — summaries and recaps — is minimal-risk under the EU AI Act. The edge is using it to evaluate staff; emotion inference is banned.
Comparisons
4 guidesSection overview
EU AI Act Tooling: How to Evaluate Compliance Software
How to evaluate EU AI Act compliance software: does it encode Article 6 and Annex III, trace every finding to an Article, and produce the Annex IV file?
- AI Governance Software Buyer's Guide 2026 | EU AI ActA buyer's guide to AI governance software: what it does, how to evaluate tools across EU AI Act, ISO 42001 and NIST AI RMF, and a selection checklist.
- AI Risk Management Tools: EU AI Act Buyer GuideHow to choose AI risk management tools for EU AI Act compliance. Covers Article 9 risk registers, tool categories, Art 99 penalties, and Dec 2027.
- Best EU AI Act Compliance Software: 2027 Buyer GuideBuyer guide to EU AI Act compliance software: Article 6 classification, Art 9 risk register, Art 11 docs, Art 43 conformity. Deadline 2 Dec 2027.
EU AI Act
2 guides- EU AI Act Compliance Software Cost: 2026 GuideWhat EU AI Act compliance software costs in 2026: pricing models, cost drivers, and the hidden price of manual work against Article 99 fines up to EUR 35M.
- EU AI Act Compliance Software for SMEs (2026)How EU-native, self-serve compliance software helps SMEs meet the EU AI Act without consultants: Article 6, FRIA, Annex IV, evidence. Fines up to EUR 35M / 7%.
Classify, document and evidence — in one place
Confir turns Article 6 and Annex III into a decision you can defend, with the technical documentation and audit trail attached.
Start free trial →