What counts as high-risk AI under the EU AI Act?
An AI system is high-risk under the EU AI Act if it is a safety component of (or is itself) a product covered by the EU safety laws listed in Annex I, such as medical devices, machinery or toys, or if it is used in one of the Annex III areas: biometrics, critical infrastructure, education, employment, access to essential services (including credit scoring and life and health insurance pricing), law enforcement, migration and border control, and the administration of justice and democratic processes.
How it works
- Check Annex I: is the AI part of a product that already needs a third-party conformity assessment under EU product law?
- Check Annex III: is it used for one of the listed purposes, for example screening CVs, scoring creditworthiness or deciding access to public benefits?
- Article 6(3) lets an Annex III system fall outside high-risk if it only performs a narrow procedural task or does not materially influence the outcome, but systems that profile people are always high-risk.
- Record your classification and the reasoning. Run the free checks to see which obligations apply.