AI Risk Classification Explorer

The EU AI Act categorizes AI systems into four risk tiers: Prohibited (unacceptable risk), High-risk (significant safety/rights impact), Limited-risk (transparency obligations), and Minimal-risk (free deployment). Each tier has different regulatory requirements.

This tool provides a preliminary assessment based on common risk factors. Final classification should be determined through professional legal review, as the EU AI Act has detailed annexes and specific criteria that may apply to your use case.

High-risk AI systems must undergo conformity assessment, maintain technical documentation, implement risk management, ensure data quality, enable human oversight, and achieve CE marking before EU market placement. Spring Software can guide you through this process.

Yes, you can redesign your AI system to reduce risk. This might involve limiting autonomous decision-making, adding human oversight, changing the sector of application, or reducing the scope of personal data processing.

Yes. The EU AI Act imposes fines up to €35M or 7% of global turnover for prohibited AI violations, and up to €15M or 3% for high-risk non-compliance. Accurate classification and compliance are critical.

Gibraltar aligns closely with EU AI Act principles but offers a more flexible regulatory framework through its AI Act and sandbox programs. Spring Software helps navigate both Gibraltar and EU requirements.

If your AI has multiple functions or use cases, each must be evaluated separately. The highest risk classification generally applies. Professional assessment is crucial for multi-functional AI systems.

Reassess whenever you significantly modify the AI system, expand its use cases, change data sources, or when new regulations are introduced. Annual reviews are recommended as a best practice.