Offers

Pricing

Resources

Our Story

Log In

Contact Us

Book a Review

Regulatory Standards · European Union

EU Artificial Intelligence Act

EU AI Act obligations, backed by evidence of what AI does.

The AI Act sets risk-based obligations for AI providers and deployers, phased in from 2025 to 2028. Transparency rules already apply; the 2026 Digital Omnibus moved high-risk obligations to December 2027. Astragar maps requirements to controls, and Aeguard evidences what AI agents actually access and do.

Register interest in EU AI ActComing to Astragar GRC
7% / €35M
Maximum fine for prohibited AI practices, whichever is higher
Aug 2026
Transparency duties for chatbots and AI-generated content apply
Dec 2027
High-risk (Annex III) obligations apply, as deferred by the Digital Omnibus

What EU AI Act requires

The obligations, in brief.

Classify AI systems
Identify which systems are prohibited, high-risk or limited-risk.
Risk management
Risk management, data governance and human oversight for high-risk AI.
Logging & transparency
Record-keeping and transparency to users and authorities.
Accuracy & security
Robustness, accuracy and cybersecurity of high-risk systems.

How Astragar helps

From checklist to measurable risk.

01
Requirement → control mapping
Map every EU AI Act requirement to controls, systems, assets and owners.
02
Evidence, continuously
Collect and maintain evidence, with sign-off from contributor to IT auditor, CISO and executive office.
03
Exposure behind the gaps
See which vulnerabilities and sensitive data put EU AI Act controls at risk.
04
Risk in financial terms
Prioritise remediation by business and financial impact, not checklist order.
Use the deferral to build evidence now. Aeguard attributes AI-agent activity to owners and logs what agents access, with tamper-evident records.

Sign-off workflow

Evidence Contributor
→
IT Auditor
→
CISO
→
Executive Office

Find the data. Test the controls. Reduce the risk.

EU AI Act mapping is coming to Astragar GRC. Talk to us about early access and how your existing evidence already applies.

Talk to us

Astragar supports compliance programmes with technical evidence and risk analysis. It does not provide legal advice or issue certifications.

See your cyber risk in $ terms, not CVSS scores.

Menu

About Us

Platform

Services

Offers

Pricing

Resources

Log In

Industries

Insurance

Private Equity

Financial Services

Healthcare

Technology & SaaS

Manufacturing

Public Sector

All industries →

Contact information

info@astragar.com

UK: +44 203 813 6553

US: +1 332 269 1229

Schedule a Demo →

Contact Us

Terms

Privacy

©Astragar All rights reserved.

Astragar™, DON’T BE VULNERABLE™ and “Prevent what you can. Insure what you can’t. Prove what you did.”™ are trademarks of Astragar.