Grace AI character portrait
Grace · AI Governance DeskAI Rules & Records
Sign in to Grace
Regulation overview

The EU AI Act, in plain English

This EU law sets rules for AI based on how it is made and used. It can apply outside the EU when an AI tool or its results reach people in the EU.

Five risk classifications

Prohibited

Social scoring, manipulative practices, untargeted face scraping. Banned outright.

High-risk

Hiring, credit scoring, critical infrastructure, education, law enforcement. Full conformity assessment required.

Limited risk

Chatbots, deepfakes, emotion recognition. Transparency obligations.

Minimal risk

Spam filters, AI in video games. Voluntary codes of conduct.

General-purpose AI

Foundation models. Documentation, copyright policy, and (above thresholds) systemic risk controls.

Key dates

Feb 2, 2025
Prohibited-AI bans take effect; AI literacy obligations apply.
Aug 2, 2025
GPAI obligations and governance rules begin.
Aug 2, 2026
Most provisions become enforceable across the EU.
Aug 2, 2027
High-risk systems regulated under product-safety law deadline.

Provider vs deployer

Provider

You make an AI system or sell it under your name. You may have added safety and record duties.

Deployer

You use an AI system at work. You may need to tell people, provide human review, and watch how it is used.

Check one AI tool

Answer a short set of questions and review the suggested risk level.

Start your assessment