EU AI Act Compliance: What Your Company Must Do Before August 2026

The clock is ticking. On August 2, 2026, the EU AI Act's provisions for high-risk AI systems become fully enforceable. Companies that deploy, distribute, or import AI systems into EU markets must comply or face penalties of up to 35 million euros or 7% of annual global turnover — whichever is higher.

This is not a distant regulatory threat. It is four months away.

What the EU AI Act Actually Requires

The EU AI Act (Regulation 2024/1689) is the world's first comprehensive AI law. It uses a risk-based approach to classify AI systems and impose proportional requirements.

The Risk Categories

Unacceptable Risk (Banned)

These AI practices are prohibited entirely as of February 2, 2025:

• Social scoring systems by governments
• Real-time remote biometric identification in public spaces (with limited exceptions)
• AI that exploits vulnerabilities of specific groups
• AI that uses subliminal techniques to distort behavior

High Risk (Heavy Regulation — Deadline: August 2, 2026)

AI systems in these areas must meet strict requirements:

• Biometric identification and categorization
• Critical infrastructure management
• Education and vocational training (access, assessment)
• Employment (recruitment, performance evaluation, promotion)
• Essential services (credit scoring, insurance, social benefits)
• Law enforcement
• Migration and border control
• Administration of justice

Limited Risk (Transparency Obligations)

AI systems that interact with humans must disclose that they are AI:

• Chatbots must identify themselves as AI
• AI-generated content must be labeled
• Emotion recognition systems must inform users

Minimal Risk (No Specific Obligations)

Most AI systems fall here — spam filters, AI-powered games, inventory management.

The August 2026 Compliance Checklist

If your AI system is classified as high-risk, here is what must be in place by August 2, 2026:

1. Risk Management System (Article 9)

You must establish and maintain a continuous risk management system that:

• Identifies and analyzes known and foreseeable risks
• Estimates and evaluates risks that may emerge during use
• Adopts risk mitigation measures
• Tests the system against the identified risks

2. Data Governance (Article 10)

Training, validation, and testing data sets must be:

• Relevant, representative, and free of errors
• Appropriate for the intended purpose
• Examined for possible biases
• Subject to appropriate data governance practices

3. Technical Documentation (Article 11)

Before placing a high-risk AI system on the market, you must prepare technical documentation that includes:

• General description of the system
• Detailed description of development process
• Information about monitoring, functioning, and control
• Description of the risk management system
• Description of changes made during the system's lifecycle

4. Record-Keeping (Article 12)

High-risk AI systems must be designed to automatically record events (logs) during operation, including:

• Period of use
• Reference database used
• Input data that led to a match
• Identification of natural persons involved in verification

5. Transparency and Information (Article 13)

High-risk AI systems must be designed to be sufficiently transparent for users to:

• Interpret the system's output
• Use it appropriately
• Understand its capabilities and limitations

6. Human Oversight (Article 14)

Systems must be designed to allow effective human oversight, including:

• Ability to fully understand the system's capacities and limitations
• Ability to correctly interpret outputs
• Ability to decide not to use the system or override its output
• Ability to intervene or stop the system

7. Accuracy, Robustness, and Cybersecurity (Article 15)

High-risk AI systems must achieve appropriate levels of:

• Accuracy for their intended purpose
• Robustness against errors and inconsistencies
• Cybersecurity against unauthorized access or manipulation

8. Conformity Assessment (Article 43)

Before placing a high-risk AI system on the market, you must undergo a conformity assessment. For most high-risk systems, this can be done through internal assessment. For biometric identification systems, a third-party assessment by a notified body is required.

9. EU Database Registration (Article 71)

High-risk AI systems must be registered in the EU database before being placed on the market. This registration is public and includes information about the system, its provider, and its conformity assessment.

How CAIBS Certification Helps

The CAIBS B.I.T. Framework aligns with the EU AI Act's requirements in several critical ways:

While CAIBS certification does not replace the formal EU conformity assessment, it provides a structured behavioral impact evaluation that addresses dimensions the EU AI Act requires but does not specify how to measure — particularly around behavioral impact and real-world outcomes.

Companies that complete CAIBS certification have a documented, third-party-verified assessment that can serve as supporting evidence in their EU AI Act conformity assessment.

Timeline: What to Do When

Do Not Wait

Companies that begin compliance work now have four months to prepare. Companies that wait until July will be scrambling — and the conformity assessment process alone can take weeks.

Start by rating your AI systems at caibsinstitute.org to understand their behavioral impact profile, then use that assessment as a foundation for your EU AI Act compliance documentation.

---

Sources: EU AI Act (Regulation 2024/1689), European Commission AI Act Implementation Timeline, Modulos AI Compliance Guide (2026), Eversheds Sutherland Global AI Regulatory Update (April 2026)

---

Related Resources

Preparing for the EU AI Act? These guides provide additional context:

• How to Get Your AI Certified: A Step-by-Step Guide for 2026 — The full certification process that satisfies EU AI Act requirements.
• The Complete AI Compliance Checklist for Small Businesses in 2026 — A practical checklist covering EU and US requirements.
• What Is AI Behavioral Certification? The B.I.T. Framework Explained — How the B.I.T. Framework maps to EU AI Act conformity assessments.

Start Your EU AI Act Compliance Today

• Rate Your AI Tool Free — Get your initial behavioral impact assessment.
• View the CAIBS Directory — See how other companies have achieved certification.
• Become a CAIBS Member — Priority review for companies facing EU deadlines.
• Start Your Client Journey — Our guided process ensures you meet every requirement.