EU AI Act: Annex III High-Risk System Obligations Apply
The deferred compliance deadline for standalone high-risk AI systems under Annex III of the EU AI Act arrives. Regulation (EU) 2026/1744, the Digital Omnibus on AI that entered into force on July 27, 2026, moved the obligations of Chapter III Sections 1, 2 and 3 from August 2, 2026 to this date. Providers of standalone Annex III high-risk systems must by now have completed conformity assessments, established quality management systems, prepared technical documentation, and put post-market monitoring in place. AI embedded in Annex I regulated products follows separately on August 2, 2028.
Key Analytics
Impact Analysis
This is the milestone the Digital Omnibus deferral was granted to accommodate, and the additional preparation window it provided is exhausted. Organizations that used the window to complete gap assessments and pilot conformity assessment procedures should be positioned to demonstrate readiness; those that paused AI governance work when the deferral was announced now face the full weight of the Chapter III obligations. Duties that were never deferred remain in force alongside these, including the prohibited practices and AI literacy obligations applicable since February 2, 2025, the general-purpose AI model obligations applicable since August 2, 2025, and the Article 50 transparency and content marking duties applicable since August 2, 2026.
Recommended Actions
- Confirm that conformity assessment is complete for every standalone Annex III high-risk system you provide, with technical documentation and quality management system evidence retained and producible on request.
- Verify that post-market monitoring is operating for each standalone Annex III high-risk system in service, rather than existing only as a documented procedure.
- Hold the remaining deadline of August 2, 2028 for high-risk AI embedded in Annex I regulated products on your roadmap, and continue tracking Commission guidance and harmonized standards published under the amended Act.
Always verify requirements with official regulatory sources.
Estimated Remediation Effort
Indicative effort to address this development, broken down by your organization's current compliance posture. Select the posture that best matches where you are today.
A partial program exists: some policies and controls are in place, but coverage, evidence, and ownership have gaps.
- ›Conformity assessment completion with retained, producible evidence
- ›Quality management system operationalization
- ›Post-market monitoring activation for systems in service
- ›Annex I August 2028 roadmap maintenance
The Cost of Waiting
Readiness work is dramatically cheaper before a deadline than after one. The ranges below come from the same estimate: the difference is only how prepared you are when the work starts.
Roughly 130 to 270 hours avoided by preparing early
Effort ranges are indicative planning estimates, not quotes. Actual effort depends on organizational scope, environment complexity, and evidence maturity. Talk to us for a scoped assessment.