Annex I

The EU Cyber Resilience Act (CRA) imposes new security requirements on AI products sold in the EU, including mandatory vulnerability reporting within 24 hours starting September 2026. Developers must …

The EU AI Act, which entered into force on August 1, 2024, establishes a risk-based framework classifying AI systems into four tiers, with most obligations for high-risk systems applying from August 2…