EU AI Act obligations
The EU AI Act board (Governance → Compliance → EU AI Act) computes the Act’s obligations against every AI System’s declared facts — risk tier, regulated role, and the GPAI classification of the models it binds — and shows each obligation with its date: in force now, or upcoming with its applies-from day.
The rule the board is built on
Section titled “The rule the board is built on”The register models “obligation X applies to system Y from date Z”, never “system Y is compliant: true”. A boolean dies at the next omnibus; a dated applicability survives it — Regulation (EU) 2026/1744 (the Digital Omnibus on AI) moved four of the Act’s dates after everyone had planned around them: Annex III standalone high-risk to 2 December 2027, Annex I embedded systems to 2 August 2028, while Art 50 transparency applied from 2 August 2026 and the added prohibitions plus Art 50(2) legacy marking land 2 December 2026.
Three statuses per (obligation, system):
| Status | Meaning |
|---|---|
| applies | The system’s declared facts put it in scope. |
| not applicable | A declared fact rules it out (e.g. minimal risk → no Art 50). |
| undetermined | The system hasn’t declared the fact the rule needs. An undeclared role cannot rule an obligation out — the honest answer is “declare it”, shown in amber as a to-do, never a pass. |
Obligations the platform cannot evaluate alone (whether a system is embedded in an Annex I product, a legacy placement date) carry a review flag with the determination you need to record — the board says so instead of guessing.
What feeds the computation
Section titled “What feeds the computation”- Risk tier and regulated role — declared on the AI System under General → Ownership & Purpose. Roles matter because the same system carries different duty sets for a provider than for a deployer, and Art 25 flips a deployer into a provider on rebranding or substantial modification. A contract drift on the system’s closure is exactly a substantial-modification signal — review the role when one fires.
- GPAI bindings — Art 53–55 attach to the model: flag models in the Asset Register as
gpai/gpai_systemic_risk, and every system binding one surfaces the exposure.
Beyond the EU
Section titled “Beyond the EU”The catalog is jurisdiction-neutral data: a framework is a set of dated obligations with rules over the same system facts (risk × role × model track) — the shape Colorado’s SB 24-205, Korea’s AI Framework Act and Brazil’s PL 2338 all converge on. GET /v1/admin/compliance/obligation-frameworks lists what’s installed; new regimes are catalog entries, not code.