EU AI Act timeline

Align teams around a single roadmap. We map deliverables, evidence, and stakeholder owners to each milestone so nothing slips.

Now → Feb 2025

Remove or avoid prohibited practices, stand up AI literacy, and baseline your inventory before the first enforcement wave.

  • Audit workloads for prohibited use-cases; document mitigations.
  • Stand up AI literacy programs for product, policy, and support teams.
  • Inventory AI systems and GPAI usage, including vendor dependencies.

By Aug 2025

GPAI providers need transparency artifacts, code-of-practice alignment, and systemic-risk notifications if thresholds trigger.

  • Publish GPAI transparency packs and usage guidelines for customers.
  • Align with the EU GPAI code of practice or equivalent controls.
  • Define contact channels and cadence for systemic-risk notifications.

By Aug 2026

High-risk AI systems must complete conformity: risk management, technical documentation, data governance, and oversight.

  • Complete Annex III classification and gap remediation roadmap.
  • Finalize technical documentation, human oversight, and logging.
  • Launch post-market monitoring with escalation and incident handling.

By Aug 2027

High-risk AI embedded into regulated products receives an extended deadline—plan integrations with notified bodies early.

  • Coordinate CE activities with product regulators or notified bodies.
  • Integrate AI conformity evidence into product technical files.
  • Test monitoring hooks and recall/withdrawal playbooks with partners.

Need help choosing?

We scope EU AI Act obligations by role, bundle evidence refresh SLAs, and align remediation milestones with your procurement model.