Did the scorecard flag high risk? We don't stop at the red flag.

An AI system isn't high-risk simply because it uses advanced technology. The classification depends primarily on the system's purpose, its field of use, and the company's role under the AI Act.

High risk may arise, for example, if the AI:

• evaluates job applicants or influences employment-related decisions;
• decides on admission to or assessment in education;
• assesses creditworthiness or access to essential services;
• performs biometric identification or categorization;
• is used in the operation of critical infrastructure;
• functions as a safety component of a regulated product.

If a system is classified as high-risk, compliance is no longer a matter of a single policy. Depending on the company's role, you may need, among other things:

• an ongoing risk management system;
• data and data quality governance;
• technical documentation and logging;
• human oversight mechanisms;
• accuracy, robustness and cybersecurity requirements;
• conformity assessment and registration;
• incident handling and follow-up processes;
• arranging contracts between the participants in the AI value chain.

We help determine exactly which obligations apply to you, and then build the necessary compliance system from both a legal and operational perspective.