EU AI Act - High Risk Provisions

international — EU
Effective: August 2, 2026 56 platforms tracked 1047 provisions indexed Enforced by: EU AI Office, National Market Surveillance Authorities

Overview

The EU AI Act High Risk Provisions establish obligations for AI systems classified as high-risk under Article 6. These systems include AI used in critical infrastructure, education, employment, essential services, law enforcement, migration, and democratic processes. Providers of high-risk AI systems must implement risk management systems, ensure data governance, maintain technical documentation, enable human oversight, and achieve appropriate levels of accuracy, robustness, and cybersecurity. Deployers must use systems according to instructions, monitor operations, and conduct fundamental rights impact assessments. General-purpose AI models with systemic risk face additional transparency obligations including technical documentation, copyright compliance, and content provenance marking.

Penalties

Up to EUR 35 million or 7% of global annual turnover for prohibited AI practices. Up to EUR 15 million or 3% for other violations.

Key Articles & Sections

Platforms We Track Subject to

Recent Changes Related to

ConductAtlas maps governance language to potentially relevant regulatory frameworks. Regulatory applicability and enforceability may vary by jurisdiction, enforcement context, and individual circumstances. This page is informational and does not constitute legal advice. Methodology

Provisions Governed by (1047 across 56 platforms)

Disclaimer of Warranties AI21 Labs
Medium
Data Subject Rights (GDPR and CCPA) AI21 Labs
Medium
Data Subject Rights (Access, Deletion, Portability) AI21 Labs
Medium
Prompt and Interaction Data Collection and Model Training Use AI21 Labs
Medium
Cookies and Tracking Technologies AI21 Labs
Medium
International Data Transfers AI21 Labs
Medium
User Indemnification Obligation AI21 Labs
Medium
Controller vs. Processor Distinction Anthropic
Medium
Limitation of Liability Cap Anthropic
Medium
User Rights Framework (Access, Correction, Objection, Portability) Anthropic
Medium
Feedback Triggers Full Conversation Storage Anthropic
Medium
Data Privacy and DPA Incorporation Anthropic
Medium
Data Controller vs. Processor Scope Limitation Anthropic
Medium
Inputs and Outputs Collected as Personal Data Anthropic
Medium
Controller vs. Processor Split for Enterprise Users Anthropic
Medium
Safeguards Team Monitoring and Enforcement Anthropic
Medium
Intellectual Property Assignment of Outputs Anthropic
Medium
AI Model Training Data Use and Opt-Out Anthropic
Medium
Prohibition on Securities and Financial Advice Reliance Anthropic
Medium
Government Customer Use-Restriction Carve-Out Anthropic
Medium
Controller vs. Processor Boundary Anthropic
Medium
Prohibition on Financial Advice Reliance Anthropic
Medium
Data Processor Exclusion Clause Anthropic
Medium
Governmental Customer Policy Carve-Out Anthropic
Medium
Cross-Border Data Transfers Anthropic
Medium
Agentic AI and Model Context Protocol (MCP) Additional Guidelines Anthropic
Medium
Limitation of Liability and Warranty Disclaimer Anthropic
Medium
Age Restriction and Parental Consent Requirement Anthropic
Medium
Employer Account-Linking and Monitoring Anthropic
Medium
Data Controller versus Processor Scope Distinction Anthropic
Medium

Showing 30 of 1047 provisions. View all →

Official Source

View official regulation text →

Get alerted when platforms change their policies — including -relevant provisions.

Subscribe to Monitor — $19/mo

Frequently Asked Questions

What does require?

Which platforms does apply to?

ConductAtlas tracks -relevant provisions across 56 platforms. Each platform's specific provisions are classified by severity and mapped to requirements.

How does ConductAtlas monitor compliance?

ConductAtlas captures policy documents daily, classifies provisions by regulatory framework, and flags changes that affect obligations. Every change is archived with cryptographic verification.