EU AI Compliance Stack 2026: One Map
One dated map of the AI Act, NIS2, GDPR/DORA and CRA obligations that hit AI vendors between August 2026 and August 2028, with EUR-Lex sources.
Solution
Article 50 has applied since 2 August 2026. The high-risk obligations moved: Annex III to 2 December 2027, Annex I to 2 August 2028. Most readiness projects on the market are still priced against the old calendar. We scope yours against the current one.
Two sessions per system: intended purpose, role in the value chain, and whether Annex I or Annex III is in play at all.
Where the marking goes, machine-readable metadata, human-facing disclosure, and the internal record that proves you did it.
Primary-source citations with access dates, so your claims hold up when the reviewer checks them.
One dated map of the AI Act, NIS2, GDPR/DORA and CRA obligations that hit AI vendors between August 2026 and August 2028, with EUR-Lex sources.
Only Article 50 applies from 2 August 2026; high-risk does not. What the Digital Omnibus changed in the AI Act calendar, with EUR-Lex sources.
Article 50 has applied since 2 August 2026. Which outputs need a label, where the disclosure sits, and who owns the sign-off record.
Next step
Send the questionnaire, RFP section or audit request. You get a written read on the gaps and what closing them takes.
Request a review