Skip to main content
Novartum Logo
Zurück zur Übersicht
Compliance• 7 Min. Lesezeit

The EU AI Act: What Software Vendors Need to Know Now

Andrea Pichl

Head of Business Development

February 28, 2025
The EU AI Act: What Software Vendors Need to Know Now
Key Takeaways

"The AI Act classifies AI systems by risk. High-risk systems (e.g., HR, critical infrastructure) require certification, quality management and human oversight."

With the AI Act, the EU has created the world's first comprehensive set of rules for artificial intelligence. For software houses this means: Compliance is no longer optional. Those who ignore it risk fines of up to 35 million Euros or 7% of global turnover.

Understanding Risk Classes

The law distinguishes four levels:

  1. Prohibited Practices: Social scoring, real-time remote biometric identification.
  2. High-Risk AI: Medical devices, recruiting tools, credit scoring. Strict documentation obligations apply here.
  3. Limited Risk: Chatbots and deepfakes (Transparency obligation: "I am an AI").
  4. Minimal Risk: Spam filters, video games (No new obligations).

We recommend our customers to check in the design phase ("Privacy by Design") which category the planned feature falls into.

FAQ

Fragen zum Thema

Antworten auf die wichtigsten Fragen rund um Lizenzmanagement, Audits und Compliance. Optimiert für schnelle Informationsfindung.

Noch Fragen offen?

Unsere Experten beraten Sie gerne unverbindlich.

The Act affects anyone who places AI systems on the market or uses them in the EU – regardless of whether the company is based in the EU.
Violations of prohibited AI practices carry penalties of up to 35 million Euros or 7% of total worldwide annual turnover, whichever is higher.
AI Law Compliance Software Engineering