In practice
Because the Act's obligations attach to the system and its risk rather than to where it is hosted, the classification is something an audit establishes about your own processes rather than about your suppliers.
A system in the EU AI Act's higher risk classification. The Act's obligations attach to the system and its risk rather than to where it is hosted, so a system in this class still needs a risk management process and documentation whichever way it is run.
Because the Act's obligations attach to the system and its risk rather than to where it is hosted, the classification is something an audit establishes about your own processes rather than about your suppliers.
The regulation the classification comes from.
Read EU AI ActWhere the classification is established.
Read How We AuditEvery term used across this site's training courses, its audit methodology and the two regulations behind them, in one place.
Back to the glossary