Compliance checks

The dates moved. Most of the obligations didn't.

Article 12 still requires high-risk AI systems to allow automatic recording of events over their lifetime, with logs kept for at least six months unless Union or national law provides otherwise (Articles 19 and 26). Article 26 still puts operating duties on deployers, including keeping those logs. The Digital Omnibus on AI, Regulation (EU) 2026/1744 of July 8, 2026, in force since July 27, 2026, delays the start dates and leaves most of the duties unchanged: the high-risk rules now apply from December 2, 2027 for stand-alone Annex III systems and from August 2, 2028 for regulated-product systems. Most Article 50 transparency duties, including chatbot disclosure and deepfake and synthetic-content labelling, apply from August 2, 2026. Only the Article 50(2) machine-readable marking duty has a transition, and only for generative systems placed on the market before August 2, 2026, whose deadline is December 2, 2026. Fines for these duties still reach up to 15 million euro or 3 percent of worldwide annual turnover, whichever is higher, and whichever is lower for SMEs and, since the Omnibus, for small mid-caps.

VITNA helps with parts of this today. The EU AI Act classifier gives a first-pass sort of your use case into prohibited, high-risk, limited, or minimal. The Ed25519-signed evidence packages are a signed export of the decisions VITNA recorded, independently verifiable offline with our published public key, and the webhook delivery log is a tamper-evident record of the webhook notifications VITNA sent. The MCP server lets your agent check your obligations before it acts. The delay is not a repeal. It exists because standards, guidance and national authorities were not ready in time, and the 16 extra months for Annex III systems, 12 for regulated products, are enough time to get compliance right or to waste. We map the evidence to the obligation, and we do not claim attestations we do not hold.

Fixed-fee readiness assessment available →