EU AI Act · Annex III · Regulation (EU) 2024/1689

EU AI Act High-Risk AI Systems

The EU AI Act classifies AI systems into four risk tiers. High-risk systems face the most stringent obligations — including mandatory risk management, technical documentation, human oversight, and EU database registration — all required before deployment.

8
Annex III categories
12+
Compliance obligations
€30M or 6%
Maximum fine

Annex III — High-Risk Categories

An AI system is high-risk if it falls within one of the eight Annex III sectors and poses a significant risk to the health, safety, or fundamental rights of persons.

1

Biometric identification

AI systems used for remote biometric identification of natural persons in public spaces, or biometric categorisation systems inferring sensitive attributes.

biometricfacial recognitionfingerprintiris scanvoice recognition identity
2

Critical infrastructure

AI used as safety components in critical infrastructure such as road traffic, water, gas, heating, and electricity supply.

power gridwater supplygas networktraffic managementcritical infrastructure
3

Education and training

AI that determines access to or assigns persons to educational institutions, or evaluates learning outcomes, including exam monitoring.

student assessmentexam gradingadmission decisioneducational assessmentstudent monitoring
4

Employment and HR

AI used for recruitment, screening, evaluating candidates, making promotion or termination decisions, or monitoring employee performance.

recruitmenthiring decisioncv screeningresume screeningjob applicant
5

Essential private services

AI used to evaluate creditworthiness, make credit decisions, set insurance premiums, or assess eligibility for essential public or private services.

credit scoringloan decisioninsurance pricinginsurance underwritingcreditworthiness
6

Law enforcement

AI used by police or judicial authorities for individual risk assessments, polygraphs, crime analytics, or evidence reliability assessment.

law enforcementcrime predictioncriminal riskpolygraphevidence assessment court
7

Migration and asylum

AI used to assess risks related to persons crossing borders, process visa or asylum applications, or detect undocumented migrants.

asylum assessmentvisa applicationborder controlmigration riskimmigration decision
8

Administration of justice

AI used to assist judicial authorities in interpreting facts and the law, researching and interpreting legal acts, or applying the law to a specific set of facts.

judicial decisioncourt decisionlegal outcome predictiondispute resolution automated

What if my AI system is high-risk?

Article 9
Risk Management System
Document and maintain a risk management process throughout the full AI lifecycle.
Article 11
Technical Documentation
Prepare comprehensive technical docs before placing on market — covers architecture, data, and testing.
Article 14
Human Oversight
Humans must be able to monitor, interpret, and override the system at all times.
Article 49
EU Database Registration
Register the system in the EU AI database before deployment.

High-risk systems have 12+ total obligations. See the full checklist →

Not sure if your AI system is high-risk?

Answer a few questions and get an instant classification with article references. Free, no account required.

Assess your AI systems free →
Disclaimer: This page is for informational purposes only and does not constitute legal advice. Consult a qualified legal professional for advice specific to your situation.