EU AI Act: Same AI with different use cases and different risks.

Now is the time you need to know where AI runs and in which process. GBTEC Process Design already holds your process context. With the AI Compliance Support Package, GBTEC Enterprise Architecture and GBTEC Work Orchestrator turn it into an AI inventory that stays current. 

Book a personal callDownload a short overview

Risk classes under the EU AI Act: same AI, different risk.

The EU AI Act distinguishes prohibited AI practices, high-risk AI systems, AI with transparency obligations and minimal-risk AI. Which class applies depends on how the AI is used. The same AI tool may present minimal risk when drafting marketing copy but could qualify as high-risk when used to pre-screen job applicants.

Marketing

HR recruiting
Minimal risk vs. High risk

Draft campaign texts and social posts. 
Minimal risk vs. High risk

Pre-screen and rank job applications. 

That is why an AI risk assessment needs the process context, and GBTEC Process Design already holds it. 

The deadline moved. The work didn't.

Some AI Act duties already apply today, including rules on prohibited AI practices. Key obligations for many high-risk AI use cases will apply from 2 December 2027. 

Today 

Rules on prohibited AI practices have applied since February 2025. They ban uses such as manipulative techniques, social scoring and emotion recognition in the workplace. To rule these out, companies first need to know where AI is used at all.

December 2027

There are key obligations for many high-risk AI use cases (see Annex III), such as those relating to HR and credit scoring. Companies using such systems must follow the provider’s instructions, assign human oversight and keep logs, among other things. Whether a use case is considered high-risk depends on the process it supports.

August 2028

High-risk AI in regulated products. This includes Annex I products. Examples of such products are medical devices, machinery, or vehicles. This applies where AI is a safety component of a product that EU product safety legislation already covers. 

Postponed is not cancelled. A reliable AI inventory is not built overnight, and the extra time is the time to build it. 

Not only companies that build AI have duties.

The AI Act does not only concern companies that build AI. Companies that use AI systems have duties of their own. Which duties apply depends on your role and on how AI is used.

AI often runs where no one has listed it: in assistants employees use, in AI features of CRM, ERP and office software, or in meeting transcription. To know which duties apply, you first need to know where AI runs and in which process. 

Your application catalogue is already there.

GBTEC Enterprise Architecture builds on your existing application catalogue and GBTEC Process Design repository. No re-capture, no new list. 

Already in 
GBTEC Process Design

  • Processes and activities, end to end 

  • Application catalogue

  • Links: which activity uses which application 

  • Roles and process owners 

Not working with GBTEC Process Design yet? Get to know the product.

Added with the 
EU AI Act Compliance Support Package 

  • AI use per application and process

  • Risk class with documented rationale 

  • Application owners and their evidence 

  • A dedicated EU AI Act insight and a Power BI dashboard 

Book a personal call

AI governance on the GBTEC Platform:
visibility, evidence and scale in one package.

The AI Compliance Support Package builds on GBTEC Process Design and uses the process context and application catalogue you already maintain there. It turns them into an AI inventory that shows where AI is used, how it is classified and what is still missing for the EU AI Act. 

AI visibility

See which applications have AI capabilities and in which processes they are used. Insights and a dashboard bring AI use, risk classes and open items together in one view for management and audit. 

Meet EU AI Act requirements

The package covers the core of high-risk obligations: identify high-risk use cases under Annex III, document the risk class per application and process with its rationale, and collect the data needed for registration in the EU database (Annex VIII) once it applies.

Large-scale data collection

Thousands of applications, each used in several processes: under the EU AI Act, every use counts. The package distributes the assessment to application and process owners automatically, regardless of the size of your application catalogue or how often an application appears in processes. 

Discover GBTEC's Solution for the EU AI Act

Book a personal call with a GBTEC expert. We look at where you stand and prepare a demo that fits your processes. 

From a personal call to your AI inventory.

Personal call


We look at where you stand: how AI is used in your company, your application catalogue and your compliance setup. Together we clarify which use cases matter most to you and what your compliance team needs from an AI inventory.

Tailored demo


Based on the call, we prepare a demo around use cases that match your processes and applications. You see how the AI inventory, risk classification and recurring reviews work together in practice.

Get started


You build your AI inventory on the data you already have in GBTEC Process Design, with no re-capture of processes or applications. We support you in setting up the package and the first review cycle.

What concerns you most about the EU AI Act?

Frequently asked questions about the EU AI Act

The deadlines were postponed. Why start now?

Some AI Act duties already apply today, including rules on prohibited AI practices. Key obligations for many high-risk AI use cases will apply from 2 December 2027. A reliable inventory takes time to build, and the postponement is the time to build it. 

We only use standard software. Does this affect us?

It can. Companies that use AI systems have duties of their own. Which duties apply depends on your role and on how the software is used.

Can't we do this in Excel or Forms?

For a one-off list, yes. For continuous evidence you need reminders, approvals, an audit trail and the link to your processes. 

Our legal team handles the AI Act. Why a tool?

Legal defines the rules. For continuous evidence you need the link to your processes, a documented risk rationale and, with GBTEC Work Orchestrator, reminders, approvals and an audit trail. 

We have no budget for another compliance project.

The package builds on the data you already maintain in Process Design. You start with what the AI Act requires, without a full Enterprise Architecture rollout, and extend only if you need to. 

Does GBTEC make us AI Act compliant?

No software does that on its own. The AI Compliance Support Package helps you document where and how your company uses AI, keep it current and have the evidence at hand. It supports you in managing your obligations; it does not guarantee the outcome. 

As of 21 October 2026 . This is a simplified overview of the EU AI Act and does not constitute legal advice.