Eu Ai Act Risk Classification Memov0.1.2

A large enterprise deploys an AI system to screen internal job applicants. The governance lead needs a memo to classify the system under the EU AI Act, determining whether it is high-risk due to employment context and if any prohibitions apply.

A medtech startup integrates an AI diagnostic tool into a new MRI machine. The product owner must classify the system under Article 6(1) as a safety component of a medical device, requiring a detailed memo for regulatory submission.

A fintech company launches an AI chatbot that provides personalized investment recommendations. The DPO needs to assess if the system falls under Annex III as a creditworthiness or insurance-pricing system, and whether transparency obligations apply.

A SaaS company fine-tunes a third-party GPT model to generate legal document summaries for clients. The provider must determine if the system is high-risk due to use in legal services and analyze GPAI obligations under Article 51.

A social media platform uses AI to moderate user-generated content. The in-house counsel needs a memo to evaluate whether the system engages in prohibited social scoring (Article 5(1)(c)) or if it falls under high-risk categories for law enforcement or democratic processes.

The company develops and sells an AI system to other businesses, taking on full provider obligations including conformity assessment. Revenue comes from licensing fees and subscriptions.

A consultancy offers a service to draft risk-classification memos for clients, leveraging deep regulatory expertise. Revenue is project-based or retainer.

A company that uses third-party AI systems in its operations conducts internal assessments to ensure compliance, reducing legal risk. This is a cost center, not a revenue model.