EU AI Act

Use AI responsibly in your organisation.

A clear purpose, appropriate access and an informed team form the foundation. We clarify the requirements for your specific task before implementation.

SECURE. CLEAR. PRACTICAL.

Set clear rules for AI from the start.

01 / 03 · PURPOSE

What should Mikis help with?

Together, we describe the specific task: what information is used, who works with it and what decisions are involved?

Classification depends on the intended use, not just the server location.

02 / 03 · FRAMEWORK

Agree requirements and responsibilities.

We document data flows, access permissions and intended outputs. The responsible advisers assess the legal classification, and we align the technical setup with it.

The RTR discussion concerned the Mikis concept presented at that meeting.

03 / 03 · TEAM

Apply the rules in everyday work.

Your team learns about capabilities, limitations and data rules. Practical exercises cover checking sources and results, and knowing when expert review is needed.

Our training supports your organisation’s AI literacy measures.

Explore training for your team →

What high-risk means

High-risk is a legal classification based on purpose and area of use. Confidential data alone does not make an assistant high-risk. A human approval click does not automatically remove the classification. To get started, we select a clearly described task with you and record the data, people involved and intended decisions. This gives your adviser a basis for legal classification; we align the technical setup accordingly.

  • Applicant assessment

    Selecting, filtering and evaluating job applications are expressly listed purposes.

  • Medicine

    Emergency healthcare triage is expressly listed. Medical software may also fall under the rules for regulated products, subject to conditions including a required third-party assessment. Even for a summary of medical findings, the diagnostic or therapeutic intended purpose needs assessment.

  • Law and tax

    Ordinary practice work is not automatically high-risk. The listed administration-of-justice purposes particularly concern assistance to judicial authorities and comparable alternative dispute resolution.

Transparency involves three different questions

Do people interact with AI?

They must be informed about direct interaction unless it is already obvious.

Is the origin technically detectable?

Within the scope of the obligation, generative system providers must ensure machine-readable marking and detectability. Exceptions and technical feasibility must be considered.

Will content be published?

Visible disclosure particularly concerns deepfakes and certain texts on matters of public interest. Such texts have exceptions for human review or editorial control with editorial responsibility.

Not every letter drafted with AI therefore needs an AI label. Conversely, a visible chat notice does not automatically fulfil the technical marking obligation. Together, we record which outputs your team creates and how they will be used. With the responsible parties, we identify which notices or technical measures should be configured within the agreed scope.

Current timetable

Legal position as of 26 October 2026. The AI Omnibus entered into force on 27 July 2026. The extended high-risk deadlines are no longer merely a proposal.

Data protection, professional secrecy and product rules continue to apply independently. Later AI Act deadlines do not give blanket permission to use a system.

  1. Since 2 February 2025AI literacy and the original prohibitions; refer to the current version.
  2. Since 2 August 2026Transparency under Article 50.
  3. Until 2 December 2026Technical marking under Article 50(2): limited transition for certain systems placed on the market before 2 August 2026.
  4. From 2 December 2027High risk under Annex III.
  5. From 2 August 2028High risk in regulated products under Annex I.

YOUR NEXT STEP

Discuss your deployment systematically.

Further information

Official information on the EU AI Act and guidance from the Austrian AI Service Desk.