The Act applies differently depending on what your AI does. Find your tool, your use case, or your industry below for the classification, the obligations, and the documents that follow.
Not sure which applies to you? Six questions, instant answer.
Run the free check →What applies when your company uses a specific AI tool.
Using ChatGPT at work makes your company a deployer under the EU AI Act. Here is your risk level, the documents you need, and the obligation that has been in force since February 2025.
Microsoft 365 Copilot puts your company in scope of the EU AI Act as a deployer. See your risk classification, the documents required, and what Microsoft does not cover for you.
GitHub Copilot makes your company a deployer under the EU AI Act. See the risk classification for coding assistants, the documents you need, and why your dev team is in scope.
A customer-facing AI chatbot triggers Article 50 transparency obligations under the EU AI Act. See what disclosure is required, by when, and which documents your company needs.
Publishing AI-generated images, video, audio or text triggers labelling obligations under Article 50 of the EU AI Act. See what you must disclose and which documents you need.
AI meeting assistants that record and summarise conversations create EU AI Act deployer obligations and interact with GDPR. See the documents required and the emotion-inference trap.
Uses that sit in the high-risk tier under Annex III, and the ones that do not.
AI that screens CVs or ranks candidates is high-risk under Annex III of the EU AI Act. See the four documents required, the human oversight duty, and the deadline after the Omnibus.
Not every ATS is high-risk under the EU AI Act. See which AI features cross into Annex III, what your company must document as deployer, and how to assess your own system.
AI used to monitor or evaluate workers is high-risk under Annex III, and emotion inference at work is banned outright. See what the EU AI Act permits and what you must document.
AI used to assess creditworthiness is high-risk under Annex III of the EU AI Act. See the deployer obligations, the fundamental rights assessment duty, and required documents.
AI used for risk assessment and pricing in life and health insurance is high-risk under Annex III. See which insurance AI uses are covered and what your company must document.
AI used to evaluate learning outcomes, grade exams, or monitor students during tests is high-risk under Annex III of the EU AI Act. See the required documents and oversight duties.
Some biometric AI is prohibited outright under Article 5 of the EU AI Act, and the rest is high-risk under Annex III. See where the line falls and what your company must document.
What applies to companies building or selling AI in a given sector.
HR tech companies building AI screening or performance tools are providers of high-risk AI under the EU AI Act. See your obligations, your customers’ obligations, and what to document.
Fintech companies using AI for credit decisions face high-risk obligations under Annex III, while fraud detection is excluded. See where your models fall and what to document.
SaaS companies adding AI features need to know whether they are a provider or deployer under the EU AI Act. See how to tell, what to document, and why buyers now ask.
Edtech companies building AI assessment, tutoring or proctoring tools face Annex III high-risk obligations. See what applies, what is prohibited, and what to document.
Agencies using AI to generate content for clients have EU AI Act obligations around labelling and literacy, and their contracts need to say who is responsible.
Medical AI sits under both the EU AI Act and medical device regulation. See how the two interact, which timeline applies, and what healthtech companies must document.