The EU AI Act's high-risk deadline is August 2, 2026 — 9 days from this article's publication. If your AI system serves EU users and falls under Annex III, you have days to meet conformity obligations. Fines start at €15M or 3% of global turnover.
Most U.S. AI founders are watching the EU AI Act the way they watched GDPR in 2018 — "it doesn't apply to us." It does. The Act is extraterritorial. If your product is used in the EU, even by free-tier users, the high-risk rules apply.
Annex III covers systems used in biometrics, critical infrastructure, employment, education, access to essential services, law enforcement, migration, and administration of justice.
You don't have to be perfect by August 2. You have to be defensible. The high-risk requirements break into four practical workstreams: risk management system, data governance, technical documentation, and human oversight and transparency.
The companies that get ahead of this won't be the ones with the biggest legal budgets. They'll be the ones with the best technical evidence.