The EU AI Act is the world's first comprehensive law on artificial intelligence - and it already applies in stages. We classify your systems, determine the relevant obligations, and establish the necessary governance at both technical and organizational levels.
The EU AI Act does not regulate “AI” in general, but rather the specific use case. Only the correct classification reveals what you need to do - and what you do not.
Prohibited practices include social scoring, manipulative influence, exploitation of vulnerabilities, and unlawful biometric categorization. These prohibitions have applied since February 2025. We assess whether a use case inadvertently falls into this category.
The strictest requirements apply to AI in critical areas such as recruitment, lending, education, critical infrastructure, or as a safety component of products. Risk management, data governance, technical documentation, human oversight, and conformity assessment are mandatory.
Transparency obligations: users must know that they are interacting with AI (chatbots), and AI-generated content must be labeled as such (deepfakes, synthetic media). This is often the most relevant category in practice for SMEs.
Most current applications fall into this category - spam filters, recommendation systems, and simple automation. There are no specific obligations, although voluntary codes of conduct are recommended. What matters is documented evidence that the classification is correct.
Risk management system, data and governance requirements, technical documentation, automatic logging, transparency, human oversight, robustness, CE marking, and registration in the EU database.
Use in accordance with the instructions, assurance of human oversight, monitoring during operation, retention of logs and - for relevant applications - information for affected persons.
Since February 2025, providers and deployers have been required to ensure that their personnel have sufficient AI literacy. We provide practical training for your teams, tailored to your specific use cases.
The Regulation entered into force in August 2024, with its obligations applying gradually. Planning early avoids costly rework.
Prohibited AI practices are banned. Providers and deployers must ensure that their personnel have sufficient AI literacy.
Obligations for general-purpose AI models apply; governance structures and national authorities begin their work.
Most obligations for high-risk systems under Annex III become applicable - including transparency obligations for limited-risk systems.
Extended deadline for high-risk AI embedded in regulated products as a safety component (Annex I).
We combine legal classification with technical implementation - so compliance does not become a barrier to innovation.
These are the potential penalties for prohibited practices - higher than under the GDPR. Breaches of other obligations can result in graduated fines. Accurate classification early in the project is the most effective protection.
As an official Odoo partner, we understand business systems in practice - and recognize where AI features in standard software may fall under the Regulation unnoticed.
For companies, this is not just about a one-off assessment, but about roles, governance, and a robust management system.
ISO 42001 structures responsibilities, controls, documentation, and improvement processes around AI. Nuviax integrates these requirements with existing ISO 27001, data protection, and security structures.
Let us classify your AI systems and draw up a pragmatic roadmap for the deadlines. In 30 minutes, you will know where you stand.
