EU AI Act risk classification: is your industrial AI high-risk?

The entry into force of the EU AI Act imposes new, strict regulatory constraints on industrial companies deploying artificial intelligence models. Determining whether your application falls into the category of high-risk systems is a critical step that determines your future legal and technical obligations. This guide details the classification criteria for vision, robotics, and maintenance, while explaining how TrustalAI secures your compliance through real-time trust metrics.

EU AI Act: how risk-level classification works

What is a high-risk industrial AI under the EU AI Act? A system is classified as high risk if it is a safety component of a regulated product, such as an industrial machine, or if it falls within the critical areas of Annex III, imposing strict traceability and control obligations.

The European regulation structures its legal framework around four levels of severity: unacceptable risk (prohibited practices), high risk, limited risk (transparency obligations), and minimal risk. For technical directors and system integrators, attention must focus exclusively on the "High risk" category. This classification, detailed in Annex III of the text, concentrates more than 90% of industrial obligations and compliance requirements. As soon as an artificial intelligence model makes decisions affecting health, the physical safety of operators, or fundamental rights, it falls under this restrictive legal regime. Suppliers and deployers must then prove that their systems are reliable, auditable, and free from dangerous bias. The required technical documentation becomes exhaustive, requiring a rigorous assessment by notified bodies before any placing on the Union market. National authorities have the power to impose severe administrative fines in the event of non-compliance with these rules.

The August 2026 deadline: why industry must prepare now

The preparatory obligations and general governance rules of the EU AI Act are already in force (European Business Review). The compliance deadline for high-risk systems is set for August 2026. In the B2B sector, where development and qualification cycles for a machine often last between 18 and 24 months, the urgency is real. Companies and integrators must incorporate these robustness requirements from the design phase to avoid commercial blockage when entering the European market.

Vision, robotics, MRO: are your use cases high risk?

Assessing your use cases requires a pragmatic analysis of the physical processes driven by your models. In the field, the boundary between limited risk and a high-risk system depends directly on the impact of the algorithmic decision on the safety of property and people. For a system integrator or an R&D director, it is essential to map each application according to its level of interaction with the physical environment.

Here is a reading grid applied to the pillars of industry:

• The execution environment: Does the model operate in a closed loop or in a space shared with human operators?

• The criticality of the decision: Does the algorithm trigger a direct mechanical action or merely recommend an action to a user?

• The existing regulatory framework: Is the final equipment already subject to European safety certifications?

This analysis determines whether you must provide proof of absolute reliability or simply technical documentation. To clarify this classification, here is a summary table of the criteria that trigger a change:

Quality control and industrial vision

A quality control system using industrial vision is classified as high risk as soon as its analysis affects the safety of a critical product (aerospace, medical) or if it directly controls a potentially dangerous machine. In these scenarios, a perception error can lead to serious material failures. For these critical systems, TrustalAI provides the real-time trust metrics required by the regulation, qualifying each prediction in less than 100 milliseconds without requiring retraining of the existing model.

Industrial robotics and the Machinery Directive

Integrating artificial intelligence into robotics requires cross-referencing the EU AI Act with the new Machinery Directive (2023/1230). Under this legal framework, the system integrator has a strict obligation of result regarding the overall safety of the equipment. As soon as an AI model controls the trajectory or movement of a robotic arm within a space shared with human operators, the system is automatically categorized as high risk. Proof of reliability then becomes an unavoidable legal requirement. Industrial companies must demonstrate that the robot’s behavior remains predictable and controllable, thereby justifying the implementation of technical measures for continuous supervision.

Predictive maintenance

The classification of a predictive maintenance (MRO) system depends on its level of decision-making autonomy. An application that is limited to generating simple alerts or recommendations for technicians is generally considered to pose limited risk. In contrast, the system immediately falls into the "high risk" category if it directly and automatically controls emergency shutdown or changes the parameters of critical infrastructure (energy distribution network, transport system). In this case, algorithmic failures threaten the continuity of public services, requiring exhaustive documentation of the robustness of the deployed models.

Annex III obligations: the cost of the black box

Placing an application in Annex III of the EU AI Act radically changes development constraints. Europe no longer accepts opaque models whose decision-making process is impossible to audit. For any high-risk system, the legislator imposes an extremely heavy technical specification aimed at ensuring data protection and the safety of end users.

Regulatory requirements include:

• Data traceability: The obligation to keep detailed event logs for each algorithmic decision, making it possible to analyze the causes of a failure.

• Robustness documentation: The need to prove, through precise metrics, that the model maintains a stable level of performance in the face of variations in its environment.

• Human oversight: The design of interfaces enabling an operator to understand, interrupt, or override the system’s actions in real time.

• Cybersecurity: The implementation of protections against attacks aimed at altering input data.

These obligations put an end to the era of the industrial "black box". Suppliers must now build transparency into the design from the outset.

A very costly compliance burden for SMEs

Regulatory compliance represents a massive financial investment. According to European Commission data relayed by 45 industrial associations (DQ India), initial costs to make a high-risk system compliant can reach up to €319,000 for an SME. This financial burden applies particularly to companies forced to redesign their entire software architecture to integrate traceability and supervision functions. Faced with this economic risk, adopting a plug-and-play solution becomes strategic. By adding an external reliability layer, industrial companies avoid modifying the existing core model, drastically reducing development costs while validating the requirements of the EU AI Act.

How TrustalAI simplifies your classification and compliance

Faced with the complexity of the EU AI Act, industrial companies are looking for technical solutions capable of securing their deployments without slowing down their production cycles. TrustalAI positions itself as the reliability layer for industrial AI. Our approach solves the fundamental problem of high-risk systems: the need to prove a model’s reliability without altering its original architecture.

Unlike traditional approaches that require retraining algorithms or designing complex and costly architectures, our solution is fully "black-box compatible." We provide the missing building block to meet Annex III requirements by integrating in plug-and-play mode with any existing computer vision model. This method enables R&D directors and system integrators to turn opaque AI into an auditable and compliant solution. By generating quantifiable trust metrics on the model’s behavior, we facilitate the classification of your applications and ensure that your equipment complies with European standards.

From black box to reliability through documented prediction

Most competing solutions are limited to post-mortem monitoring, analyzing errors only after the decision has already caused an incident on the production line. TrustalAI establishes true reliability through prediction. Our technology measures the uncertainty of each inference in real time, with latency below 100 milliseconds (and as low as 20 ms in edge computing), before the mechanical action is even executed. This instant qualification provides the auditability and proof of control required by European law. Deployed in plug-and-play mode, this reliability layer documents the robustness of your high-risk systems without disrupting your industrial pace.

Conclusion: anticipate compliance, secure your industrial deployment

The August 2026 deadline is approaching quickly, and B2B development cycles require integrating EU AI Act requirements today. Whether you are deploying industrial vision solutions, advanced robotics, or critical maintenance, the classification of your high-risk systems determines your legal responsibility. This regulatory compliance should not slow your technological progress. By integrating dedicated, plug-and-play reliability blocks, you turn a legal constraint into a competitive advantage, ensuring safe and auditable deployments.

FAQ: frequently asked questions about AI classification in industry

How do I know if my industrial AI system is considered high risk under the EU AI Act?

A system is high risk if it serves as a safety component covered by EU harmonization legislation, such as the Machinery Directive, or if it makes decisions that directly affect critical infrastructure. Any artificial intelligence controlling dangerous equipment or inspecting the quality of critical parts automatically falls under this strict classification.

What is the difference between the Machinery Directive and the EU AI Act for an integrator?

The EU AI Act regulates the AI software component by imposing transparency and robustness criteria. The Machinery Directive makes the integrator criminally liable for the overall safety of the physical machine delivered. These two regulations complement each other and together require proof that the embedded artificial intelligence remains controllable and reliable.

Can an existing vision AI model be made compliant without retraining it?

Yes, by adding an external reliability layer. TrustalAI qualifies each prediction in real time in plug-and-play mode, which provides the robustness documentation required by the EU AI Act for high-risk systems, without modifying the client model.