The EU AI Act (Regulation (EU) 2024⁄1689) has been in force since 1 August 2024 and applies in phases: prohibited AI practices from February 2025, requirements for high-risk systems from August 2026. It applies to all companies that develop, distribute or deploy AI systems in the EU — regardless of where the company is headquartered.

The Act classifies AI systems into four risk categories: Unacceptable risk (prohibited, e.g. subliminal manipulation), High risk (strict requirements, e.g. AI in medical devices, recruitment processes, critical infrastructure), Limited risk (transparency obligations, e.g. chatbots must identify themselves as AI) and Minimal risk (no specific requirements, e.g. AI spam filters).

For high-risk AI systems, the Act requires: complete documentation, traceability of decisions, human oversight and ability to intervene, data protection by design and risk minimization measures. Organizations using AI for HR, credit assessment, law enforcement or medical diagnosis typically fall into this category.

Silent AI is designed for internal enterprise knowledge management use and generally does not fall into the high-risk category. The fully local architecture (no data transfer, AD access control, fully auditable) simplifies compliance evidence for organizations wanting to deploy AI internally.

Frequently asked questions

Prohibited AI practices are banned from February 2025. Requirements for high-risk AI systems apply from August 2026. Requirements for general-purpose AI models (GPAI, such as large foundation models) apply from August 2025. Organizations should classify their deployed AI systems now.
An internal AI assistant that answers employee questions and searches documents generally falls into the 'limited risk' or 'minimal risk' category. Transparency obligations (users must know they are interacting with AI) must be met. For high-risk applications — such as AI-assisted HR decisions — stricter requirements apply.
Yes. The EU AI Act has extraterritorial scope: it applies to any company that offers or deploys AI systems in the EU — regardless of where the company is headquartered. US providers such as OpenAI, Microsoft and Google are fully bound by it.