EU AI Act Compliance

Evidence capability under the EU AI Act for companies in the DACH region

Risk classification, procedure documentation, audit-proof evidence and the overlap with GDPR. What Articles 6, 9, 10 and 13 require, anchored in day-to-day operations instead of attested afterward.

EU AI Act: what an institution actually has to produce

  • Risk classification of your procedures under Article 6: prohibited, high-risk, limited, minimal.
  • Data governance under Article 10: the origin of the underlying data, bias review, representativeness.
  • Technical documentation under Article 11 and Annex IV: description of the procedure, method, evaluation criteria.
  • Transparency obligations under Article 13: what affected persons and auditors must be able to see.
  • Where this overlaps with GDPR: lawful bases under Article 6, automated decisions under Article 22, impact assessment under Article 35.

Four risk tiers, four control levels

The regulation classifies procedures by risk. The tier determines what an institution has to produce.

Diagram as text
  1. ProhibitedArticle 5

    Typical proceduresSocial scoring, real-time biometrics in public spaces

    What is requiredFull ban. Use is ruled out, regardless of intent.

  2. High-riskArticle 6 and Annex III

    Typical proceduresCredit scoring, candidate selection, access to education

    What is requiredConformity assessment, technical documentation, data governance, logging, transparency.

    This is where SIMO works

  3. LimitedArticle 50

    Typical proceduresChatbots, generated content, deepfakes

    What is requiredLabeling obligation. Users must be able to recognize that they are dealing with an AI system.

  4. MinimalRecital 27

    Typical proceduresSpam filters, recommendation logic, game characters

    What is requiredNo obligation. A voluntary code of conduct is possible.

We set up your operations so that this evidence arises in the course of everyday business. No compliance stamp applied afterward, evidence from the outset.

Ready to talk?

Thirty-minute discovery call. A factual read on whether SIMO is the right partner for your question.

Book discovery call