Guides · Regulation (EU) 2024/1689
EU AI Act guides for the teams doing the work
Operational breakdowns of the obligations that actually land on deployers and product teams — what each article requires, who owns it, and what evidence proves it is running. Informational guidance, not legal advice.
EU AI Act · Application timeline
What actually applies on August 2, 2026
Most write-ups of this date are out of date. The Digital Omnibus on AI deferred the Annex III high-risk regime by sixteen months. What attaches on August 2, 2026 is Article 50 transparency — narrower than the original plan, and closer than most teams think.
EU AI Act · Article 26
Article 26 deployer obligations, operationally
Deployers of high-risk AI systems carry their own obligations under the AI Act — independent of anything the vendor did. Here is each Article 26 duty translated into who does what, and what evidence shows it is actually running.
EU AI Act · Annex III
Annex III high-risk categories, with real product examples
High-risk under the AI Act is not about how powerful a model is — it is about where the system is used. Annex III lists eight areas. Here is each one in plain terms, with the product features that actually land in it.
EU AI Act · Article 27
Who needs a FRIA under Article 27 — and who doesn't
The fundamental rights impact assessment is one of the most misunderstood duties in the AI Act. Teams either assume every high-risk deployer needs one, or miss that they are captured. The scoping rule is narrow and specific — here it is, operationally.
EU AI Act · Article 50
Article 50 transparency: chatbots, deepfakes, and synthetic content
Most product teams that conclude "we have no high-risk AI" stop reading the AI Act too early. Article 50 attaches to ordinary features — support chatbots, image generators, AI-written content — and it applies from August 2, 2026.
EU AI Act · Roles
Provider or deployer? Getting your AI Act role right
Everything in the AI Act hangs off one question asked per system: did you place this on the market under your name, or are you using it under your authority? Get the role wrong and you build the wrong program.
AI governance · The register
What is an AI register — and why every deployer needs one
Every AI governance framework — the EU AI Act, ISO 42001, NIST AI RMF — starts from the same object: a register of the AI systems you actually operate. Here is what an AI register is, what belongs in each entry, and why it is the first artifact anyone asks for.
AI governance · Inventory
How to build an AI system inventory, step by step
You cannot classify, oversee, or evidence systems you have not found. Here is the discovery method that surfaces the AI your organization actually uses — including the tools nobody told IT about — and turns the first pass into a record that stays current.
AI governance · Registers compared
Algorithm register vs AI register vs the EU database
"Register" is doing three different jobs in AI governance right now — public transparency, regulatory filing, and internal operations. Confusing them leads teams to publish what they should not or skip what they must. Here is the map.
Comparisons · Vanta
Vanta vs Attevera for the EU AI Act
These two tools are asked the same question by procurement — "what's your AI governance answer?" — but they do different jobs. Here is an honest map of where each fits, and why plenty of teams run both.
Comparisons · Drata
Drata vs Attevera for the EU AI Act
Drata and Attevera overlap on three words — EU AI Act — and diverge on almost everything else about how they get there. Here is the honest split, based on each vendor's own materials.
Comparisons · Holistic AI
Holistic AI vs Attevera
These two sit closer than the horizontal compliance platforms — both are AI-governance-first. The honest differences are scale, technical testing, and how you buy. Here is the map, from each vendor's own materials.
Comparisons · Spreadsheets
Running EU AI Act readiness in spreadsheets
The honest competitor to every governance tool is a spreadsheet, and pretending otherwise insults your intelligence. So here is the fair version: what the spreadsheet does well, where it structurally breaks, and the signals that you have crossed the line.