You call an API. The EU calls you a deployer.

If your app uses ChatGPT, Claude, or any AI service — and anyone in the EU touches it — you have legal obligations. Most are straightforward. But first, you need to know which ones apply to you.

Check my obligations — free, 2 min

Prepare now — with free tools

Not sure where you stand?

The EU AI Act affects every business using AI in the EU — but obligations vary widely. Some need a simple label. Others need full audit infrastructure. Most SMEs fall somewhere in between.

Find out in 2 minutes →

EU AI Act Implementation Guide — 9 Chapters Live

From risk classification to enforcement procedures. Written for deployers, not lawyers. 12–20 min per chapter.

Read the Guide

10-Step Compliance Checklist

A practical step-by-step checklist to prepare your business before August 2026. Print it, share it, use it.

View Checklist

Enforcement & Penalties

What happens if you don't comply. Fine structures, enforcement bodies, and real-world examples.

Read More

Have a question about the EU AI Act?

Our AI compliance advisor is available 24/7 on this page. Ask about your specific obligations, risk classification, or deadlines. Look for the chat icon in the bottom-right corner.

Compliant AI Hosting — Coming Soon

EU data residency, automatic audit logging, and built-in compliance controls. Designed for SMEs. Details announced before launch.

Stay ahead of the EU AI Act

Join the waitlist. Get compliance updates, tool announcements, and early access to Hlinix hosting.

No spam. We will notify you before launch.

Contact Us

Have a specific question about your compliance situation? Send us a message and we will respond as soon as possible.

Or email us directly: hello@hlinix.com

Frequently Asked Questions

The EU AI Act (Regulation 2024/1689) is the world's first comprehensive legal framework for artificial intelligence. It was adopted in August 2024 and introduces binding rules for AI systems based on their risk level. Full high-risk obligations take effect on 2 August 2026, with prohibited practices already banned since February 2025.

The Act applies to any organisation that develops, deploys, imports, or distributes AI systems within the EU market — regardless of where that organisation is based (Article 2). If your AI system affects people in the EU, you are likely subject to the regulation. This includes both EU-based and non-EU companies.

The Act defines four risk tiers: prohibited (Article 5), high-risk (Article 6 and Annex III), limited risk (Article 50), and minimal risk. Prohibited systems are banned entirely. High-risk systems face the heaviest obligations including conformity assessments. Limited-risk systems require transparency disclosures. Minimal-risk systems are largely unregulated.

A high-risk AI system is one that falls under Annex III's eight domains (biometrics, critical infrastructure, education, employment, essential services, law enforcement, migration, and justice) or serves as a safety component of an EU-regulated product. These systems must comply with requirements for risk management, data governance, technical documentation, and human oversight (Articles 9–15).

Fines range from €7.5 million to €35 million, or 1% to 7% of global annual turnover, depending on the violation. Deploying a prohibited AI system carries the highest penalty of €35M or 7% of turnover. Failing to meet high-risk obligations can result in fines up to €15M or 3% of turnover (Article 99).

A provider develops or commissions the AI system and places it on the market (Article 3(3)). A deployer uses the AI system under their authority in a professional capacity (Article 3(4)). Your obligations differ significantly based on your role. Providers face the broadest set of requirements including conformity assessments and CE marking.

The Act entered into force on 1 August 2024. Prohibited AI practices have been banned since 2 February 2025. AI literacy obligations applied from 2 February 2025. Full high-risk obligations, including conformity assessments and registration requirements, take effect on 2 August 2026. GPAI model rules apply from 2 August 2025.

Yes. The Act has extraterritorial scope under Article 2(1). If your AI system's output is used within the EU, or if you place an AI system on the EU market, you must comply regardless of where your organisation is headquartered. This is similar to the GDPR's extraterritorial reach.

Deployers of high-risk AI systems that are public bodies, or private entities providing essential services, must conduct a fundamental rights impact assessment before deploying the system (Article 27). This assessment evaluates the system's potential impact on fundamental rights including non-discrimination, privacy, and freedom of expression.

Hlinix provides free tools to help you understand your obligations under the EU AI Act. Our Risk Checker identifies your risk classification in 2 minutes. Our Implementation Guide walks you through compliance step by step. Compliant AI hosting is coming soon.