The world's first comprehensive legal framework for artificial intelligence, establishing risk-based requirements for AI systems.
The EU AI Act (Regulation 2024/1689) establishes a risk-based framework for AI systems placed on the EU market or used in the EU. It categorises AI systems by risk level — unacceptable risk (prohibited), high risk (strict requirements), limited risk (transparency obligations), and minimal risk (no specific obligations). Supply chain AI applications fall primarily in the high-risk category.
Providers of AI systems placed on the EU market, deployers of high-risk AI systems, and importers and distributors of AI systems. Non-EU providers are in scope if their AI systems are used in the EU. Supply chain and logistics AI — including AI used for worker management, demand forecasting, and automated procurement decisions — may qualify as high-risk.
High-risk AI systems require conformity assessments, technical documentation, human oversight measures, accuracy and robustness standards, and registration in an EU database. Providers must implement quality management systems and post-market monitoring. General purpose AI models have additional transparency and copyright obligations.