The EU AI Act obligation Map
Every article of Regulation (EU) 2024/1689 that creates an obligation for a small or medium-sized organisation. 34 obligations, each stating who it binds, from when, and what evidence it requires. Rules engine as of 2026-08-03.
Also available as a JSON API and as a dated changelog.
- Article 4: AI literacy
deployer, provider · high, limited risk · applies from 2025-02-02
- Article 5: Prohibited AI practices
deployer, provider · unacceptable risk · applies from 2025-02-02
- Article 8: Compliance with the requirements
provider · high risk · applies from 2027-12-02
- Article 9: Risk Management System
provider · high risk · applies from 2027-12-02
- Article 10: Data Governance and Quality Management
provider · high risk · applies from 2027-12-02
- Article 11: Technical Documentation
provider · high risk · applies from 2027-12-02
- Article 12: Record-Keeping
provider · high risk · applies from 2027-12-02
- Article 13: Transparency and Provision of Information to Deployers
provider · high risk · applies from 2027-12-02
- Article 14: Human Oversight
deployer, provider · high risk · applies from 2027-12-02
- Article 15: Accuracy, Robustness and Cybersecurity
provider · high risk · applies from 2027-12-02
- Article 16: Obligations of Providers of High-Risk AI Systems
provider · high risk · applies from 2027-12-02
- Article 17: Quality Management System
provider · high risk · applies from 2027-12-02
- Article 18: Documentation Keeping
provider · high risk · applies from 2027-12-02
- Article 19: Automatically Generated Logs
provider · high risk · applies from 2027-12-02
- Article 20: Corrective Actions and Duty of Information
provider · high risk · applies from 2027-12-02
- Article 21: Cooperation with Competent Authorities
provider · high risk · applies from 2027-12-02
- Article 22: Authorised Representatives of Providers of High-Risk AI Systems
provider · high risk · applies from 2027-12-02
- Article 23: Obligations of Importers
importer · high risk · applies from 2027-12-02
- Article 24: Obligations of Distributors
distributor · high risk · applies from 2027-12-02
- Article 25: Responsibilities Along the AI Value Chain
provider · high risk · applies from 2027-12-02
- Article 26: Data Quality and Governance
deployer · high risk · applies from 2027-12-02
- Article 27: Fundamental Rights Impact Assessment
deployer · high risk · applies from 2027-12-02
- Article 43: Conformity Assessment for High-Risk AI Systems
provider · high risk · applies from 2027-12-02
- Article 47: EU Declaration of Conformity
provider · high risk · applies from 2027-12-02
- Article 48: CE Marking for High-Risk AI Systems
provider · high risk · applies from 2027-12-02
- Article 49: EU Database Registration
provider · high risk · applies from 2027-12-02
- Article 50: Chatbot Disclosure
deployer · limited risk · applies from 2026-08-02
- Article 53: Obligations for Providers of General-Purpose AI Models
provider · limited risk · applies from 2025-08-02
- Article 54: Authorised representatives of providers of general-purpose AI models
provider · limited risk · applies from 2025-08-02
- Article 55: Obligations for Providers of GPAI Models with Systemic Risk
provider · limited risk · applies from 2025-08-02
- Article 72: Post-Market Monitoring by Providers
provider · high risk · applies from 2027-12-02
- Article 73: Reporting of Serious Incidents
provider · high risk · applies from 2027-12-02
- Article 85: Right to Lodge a Complaint with a Market Surveillance Authority
deployer · high risk · applies from 2026-08-02
- Article 86: Right to explanation of individual decision-making
deployer · high risk · applies from 2027-12-02