1. Define intended purpose
Document exactly what the system is designed to do, for whom, and under what operating conditions.
AIACT Research · Updated September 2026
AI Act compliance
Compliance begins with classification: confirm whether the technology qualifies as an AI system, define intended purpose, identify your role, then determine the relevant risk and obligation pathway.
2. Identify operator role
Provider, deployer, importer, distributor and GPAI-model provider roles can trigger different duties.
3. Classify risk
Check Article 5, Article 6, Annex I, Annex III, Article 50 and GPAI provisions.
4. Build evidence
Maintain technical documentation, logs, risk records, policies and human-oversight controls where required.
5. Monitor changes
Reassess classification when intended purpose, model capability, deployment context or law changes.
Primary / official referenceOpen official source ↗
AIACT provides independent research and educational tools. This page is not legal advice. Regulatory status, guidance and implementation dates can change; verify the current official text before relying on it.