Unacceptable risk
Prohibited: social scoring, manipulation or emotion recognition at work and school, among others.
AI Act · Regulation (EU) 2024/1689
EU AI Act: comply with a clear plan
We classify your AI systems by risk, define your obligations according to your role and integrate them into an ISO 42001 management system.
What is the AI Act?
The first comprehensive AI law
The AI Act regulates the development, marketing and use of AI in the European Union with a risk-based approach: the higher the risk, the more obligations.
It also applies to providers and deployers outside the EU when their systems, or the outputs they produce, are used within it.
In 2026, Regulation (EU) 2026/1744, known as the Digital Omnibus, postponed the high-risk obligations and adjusted other requirements. The current timeline is below.
Risk levels
Four categories
High risk
Employment, credit, education, biometrics, critical infrastructure or product safety components: strict requirements and conformity assessment.
Transparency
Chatbots, deepfakes and generated content: users must be informed and content must be marked.
Minimal risk
No specific obligations; voluntary codes of conduct are encouraged.
Phases
How we get you to compliance
- 1Inventory of AI systems and models in use or in development.
- 2Classification by risk level and by role: provider, deployer, importer or distributor.
- 3Gap analysis against applicable obligations and the current timeline.
- 4AI governance: policies, literacy, human oversight and risk management.
- 5Technical documentation, logging, transparency and conformity assessment readiness.
- 6Integration with ISO/IEC 42001 to sustain compliance over time.
Timeline
Key dates after the Digital Omnibus
February 2025
Prohibited practices and AI literacy.
August 2025
Obligations for general-purpose AI models.
August 2026
Article 50 transparency: chatbots, deepfakes and content marking.
December 2027
Annex III high-risk systems: employment, credit, education, biometrics and others.
August 2028
AI embedded in Annex I regulated products.
Fines of up to 35 million euros or 7% of worldwide turnover for prohibited practices.
Why Cloud Legion
Comply and keep innovating
Clarity
You know which systems are in scope and what you need to do.
Access to the European market
You sell AI products in the EU without regulatory roadblocks.
ISO 42001 as the backbone
A certifiable management system that organizes compliance.
Proven experience
The first Argentine company and the first Latin American consultancy certified in ISO/IEC 42001.
Who it applies to
AI providers and deployers in Europe
- Companies selling AI products in the EU
- SaaS platforms with AI features
- Fintechs and insurers
- HR and recruitment
- Healthcare and medical devices
- General-purpose model developers
FAQ
What clients ask us most
What is the AI Act?
It is Regulation (EU) 2024/1689, the first comprehensive law on artificial intelligence. It classifies AI systems by risk level and sets obligations for each role.
Does it apply to Latin American companies?
Yes, if they market AI systems in the European Union or if the outputs of their systems are used there.
What changed with the Digital Omnibus?
Regulation (EU) 2026/1744 postponed Annex III high-risk requirements to 2 December 2027 and Annex I requirements to 2 August 2028, and relaxed the AI literacy obligation.
How does it relate to ISO 42001?
ISO/IEC 42001 provides the management system (policies, risks, controls and continuous improvement) on which compliance rests. It does not replace legal obligations, but it organizes them and makes them easier to demonstrate.
Does your AI reach Europe?
We classify your systems and show you which obligations you have and from when.