Where should I start with the EU AI Act?

Start by establishing two things: whether the Act applies to you at all, and whether you are a provider or a deployer. Almost every misclassification traces back to getting the role wrong. Reglynn's free 2-minute checker settles both, then points you at the relevant guide.

Is the EU AI Act delayed?

Partly. The June 2026 Omnibus deferred most Chapter III high-risk obligations to 2 December 2027, and some to 2028. It did not defer everything: Article 5 prohibitions, Article 4 AI literacy and Article 50 transparency duties are enforceable now, the last of these since 2 August 2026.

Which guide applies if I only use AI through an API?

Start with GPAI and Article 53, which explains when building on someone else's model makes you a model provider. Then read the SaaS guide: calling an API keeps Article 53 duties with the model provider, but it does not remove your own system-level duties such as Article 50 chatbot disclosure.

EU AI Act Guides — Deadlines, Risk Tiers & Obligations

Q: Do these guides count as legal advice?

No. They are a structured self-assessment framework based on Regulation (EU) 2024/1689 as amended by the June 2026 Omnibus. They indicate where you likely stand and what to verify with a qualified advisor. Reglynn is not a notified body and issues no certification.

Every Reglynn guide in one place. They are written for founders, product managers and compliance leads who need a defensible position on the EU AI Act — not a law-review article. Each one states what the Act requires, what is enforceable today versus deferred, and what you actually have to write down.

New here? Start with the free 2-minute checker to get your likely risk tier, then read the guide for whatever it flags.

Start here

Free EU AI Act checker Answer five questions, get your likely risk tier and the obligations that attach to it. No account, no card. Compliance checklist The six-step sequence, in order: scope, role, GPAI, risk tier, the Article 6(3) exemption, and what bites now. See a real gap report A complete report for an AI recruitment startup, unredacted, so you know exactly what €59 buys.

Deadlines and what changed

Every deadline, post-Omnibus What is enforceable now, what moved to December 2027, what moved to 2028 — and the SME fine rule most articles get backwards. The June 2026 Omnibus What the amendment actually moved, what it left untouched, and why 16 extra months is tighter than it sounds. Regulatory changelog Every change that affects classification, newest first, with what each one meant in practice. Penalties and fines The three Article 99 tiers — and the SME rule that most published guidance states backwards.

Work out where you stand

These four decide your classification. Most misclassifications happen in the first two.

Provider or deployer? The question founders answer wrong most often — and how substantial modification makes you a provider without you choosing to be. The Annex III list All eight high-risk categories, what each actually covers, and the two questions that decide most classifications. Article 50 transparency The part of the Act that is already enforceable. Four disclosure duties, and where teams fail them. Is my chatbot high-risk? Usually no — but Article 50 transparency has been enforceable since 2 August 2026, and that one does apply to you. The Article 6(3) exemption How a system inside an Annex III area can still fall outside high-risk — unless it profiles natural persons. GPAI and Article 53 Does fine-tuning make you a model provider? The four factors that decide it, and the four duties if you cross the line.

By industry

HR & recruitment AI Hiring, screening and workforce management are presumptively high-risk under Annex III. Vendor duties vs employer duties. SaaS with AI features Classification is feature-level, not company-level — and calling someone else's API removes less than teams assume. Fintech, credit & insurance Credit scoring and insurance pricing are named in Annex III. Fraud detection is explicitly carved out. HealthTech & medical devices Medical device AI attaches through Annex I, not Annex III — a different route and a later deadline than everyone else is reading.

How Reglynn works

Classification methodology The published, versioned four-step method behind every report — and what the engine will not do. Our own AI Act status We sell self-assessments and are ourselves an AI system. This is our own classification, including the boundary case we flag against ourselves. About Reglynn What this is, who built it, and how your assessment answers are handled.

Not sure which guide you need?

The free checker asks five questions and tells you your likely risk tier — then points you at the guides that actually apply to you.

Start the free scan

No card, no account. Full gap report from €59. See a real report first.

Self-assessment, not legal advice. This page and the Reglynn report are a structured self-assessment based on the EU AI Act (Regulation 2024/1689, as amended by the June 2026 Omnibus). They indicate where you likely stand and what to verify with a qualified advisor. Reglynn is not a notified body and issues no certification.

How this was made. Reglynn reports are generated by an AI system and reviewed before delivery. Reglynn is a Limited Risk AI system under Article 50; we disclose AI involvement wherever it occurs, including in our chat assistant. Our own self-assessment.