EU AI Act compliance · AI governance · Client Vision by 3HUEDeferred. Not cancelled.
--days
--hours
--minutes
--seconds
until Annex III high-risk obligations apply on December 2, 2027
The Digital Omnibus moved the EU AI Act's high-risk deadline to December 2, 2027. The bans and transparency rules are already live. Client Vision gives you the AI inventory, the controls, the policy, the oversight and the audit trail to be governed before the date arrives. Run it yourself, or with 3HUE's AI governance team.
Screens show the Big Venture Incorporated demo workspace. All figures are sample data. Not legal advice.
Trusted in regulated industriesA transit technology companyA large North American bankA marine services company
3 regulated industries10 business-day Snapshot100% executive-led delivery
What is the EU AI Act?
The first law that sorts AI by the harm it can do.
The EU AI Act (Regulation (EU) 2024/1689) sets rules for AI systems placed on the EU market or whose output is used in the EU, wherever the provider is based. It sorts AI into risk tiers. Some practices are banned outright, high-risk systems carry the heaviest duties, and systems that interact with people must say so.
ProhibitedSocial scoring, emotion recognition at work, manipulative techniques. Banned since Feb 2, 2025.
High-riskHiring, credit, education, critical infrastructure and other Annex III areas. Risk management, human oversight, logging, documentation.
TransparencyChatbots, deepfakes and AI-generated content must be disclosed or labelled. Live since Aug 2, 2026.
MinimalSpam filters, forecasting, code assistants. No new duties beyond AI literacy.
EU AI Act timeline · after the Digital Omnibus
Three dates have passed. The big one is next.
- Feb 2, 2025In force
Prohibited AI practices (Art. 5) and AI literacy (Art. 4).
- Aug 2, 2025In force
General-purpose AI model obligations and penalties.
- Aug 2, 2026In force
Transparency obligations (Art. 50) for chatbots and AI-generated content.
- Dec 2, 2027High-risk · Annex III
Risk management, data governance, logging, human oversight and documentation for high-risk uses.
- Aug 2, 2028High-risk · Annex I
AI embedded in products already covered by EU product-safety law.
Dates as amended by the Digital Omnibus on AI, Regulation (EU) 2026/1744, in force since July 27, 2026. It moved the high-risk dates; it did not remove the obligations.
AI governance framework · seven words
From "what AI do we run?" to proof. Every screen is the real product.
6AI governance controls imported into the baseline in one pass
64%of production AI systems registered with an owner and an approved use: 7 of 11
v1.0AI acceptable use policy approved, published and frozen
67audit events verified: the hash chain is intact
Figures from the Big Venture Incorporated demo workspace (sample data), Sep 26, 2026.
Free tool · EU AI Act risk tier check
Which of your AI uses are high-risk?
Tick the ways your organization uses AI. We'll sort them into the Act's risk tiers and show which date applies. Your answers stay in this browser. It's a first pass, not legal advice.
Tick a use to see its tier.
Book an AI governance reviewWays to work with 3HUE
See pricing for all three lanes →01 · Client VisionRun it yourselfFree workspace to start. Assurance adds CloudSignals, RiskOps and a governance pack; Multi adds all six. Annual or monthly.Start free →
03 · Managed by 3HUEWe run it with youA named vCISO and scoped programs (RMP, CIRP, ISP, VCP, SEA), run in the Client Vision plan you hold. Priced to your program in the builder.Book a vCISO strategy call →
EU AI Act compliance services · two ways in
Your workspace. Your call on who drives.
Self-serve
Run it yourself.
- Track your AI inventory as a measured metric, with an owner for every system
- Import AI governance controls mapped to the Act's articles and ISO/IEC 42001
- Publish your AI acceptable use policy and set the board's AI tolerance
- Raise oversight gaps as POA&M findings, each with an owner and a date
AI governance team by 3HUE
Or we get you there.
- An AI inventory and risk classification workshop across your business units
- Your AI policy, controls and oversight model, built with you in the same workspace
- A gap plan for every high-risk use, sequenced to December 2, 2027
- Trust-center language your customers and auditors can rely on
Questions
What leadership asks first.
What is the EU AI Act?
The EU AI Act, Regulation (EU) 2024/1689, is the European Union's law on artificial intelligence. It bans a short list of practices, sets strict duties for high-risk AI systems, requires transparency when people interact with AI or see AI-generated content, and regulates general-purpose AI models.
Does the EU AI Act apply to US companies?
Yes, if you place AI systems on the EU market or put them into service there, or if the output of your AI system is used in the EU. Where your company is based doesn't change that.
When do the high-risk obligations apply?
December 2, 2027 for the high-risk uses listed in Annex III, such as employment, credit, education and critical infrastructure. August 2, 2028 for AI embedded in products covered by EU product-safety law (Annex I). The Digital Omnibus, Regulation (EU) 2026/1744, set these dates in July 2026.
What counts as a high-risk AI system?
AI used in the areas listed in Annex III: biometrics, critical infrastructure, education, employment and worker management, access to essential services such as credit and insurance, law enforcement, migration, and the administration of justice. Screening job applicants is a common example.
What are the fines under the EU AI Act?
Up to €35 million or 7% of global annual turnover, whichever is higher, for prohibited practices. Up to €15 million or 3% for most other obligations, and up to €7.5 million or 1% for supplying incorrect information. Smaller companies pay the lower of the two amounts.
What is AI literacy under Article 4?
Article 4 asks organizations to support a sufficient level of AI literacy among the staff who operate and use their AI systems. It has applied since February 2, 2025. The Digital Omnibus softened the wording in 2026, but role-based training remains the practical way to show it.
How does ISO/IEC 42001 relate to the EU AI Act?
ISO/IEC 42001 is a voluntary standard for an AI management system. It doesn't replace the Act's legal duties, but its controls line up with much of what the Act asks for: inventory, impact assessment, data governance, oversight and documentation. Client Vision's AI governance controls reference both.
Deferred. Not cancelled.
Start with an AI governance review: fifteen minutes, your questions, real screens.