EU AI Act Compliance
How AIMS supports your organisation's EU AI Act compliance
AIMS under the EU AI Act
Workflo as Provider
Workflo is a Provider under EU AI Act Art. 3(3), as it develops and places AIMS on the market under its own name. AIMS falls into the Limited Risk category under Art. 50: transparency obligations apply, but it is not classified as a high-risk AI system.
AIMS monitors tools — it does not evaluate individuals or make automated decisions about people. This is the fundamental distinction from high-risk AI systems.
Your organisation as Deployer
When you deploy AIMS in your organisation, you become a Deployer under the EU AI Act. You are responsible for fulfilling the applicable deployer obligations — AIMS provides tools and documentation to help you do so.
Ultimate legal compliance is your organisation's responsibility. AIMS facilitates the process but does not replace human oversight or legal assessment.
What AIMS provides for compliance
1. Automatic EU AI Act risk classification
AIMS automatically classifies every detected AI tool according to EU AI Act risk categories:
- Prohibited — systems prohibited under EU AI Act Art. 5
- High risk — coding assistants, HR AI, critical infrastructure AI
- Limited risk — image generators, writing AI, translators
- Minimal risk — simple search, basic automation
- GPAI — general-purpose large language models (ChatGPT, Claude, etc.)
2. Audit log & reports
AIMS maintains a detailed log of all AI tool activity. The Shield plan supports log retention obligations under EU AI Act Art. 26(5). Logs are exportable in JSON format.
3. Real-time alerts
If a prohibited or high-risk AI tool appears in your organisation, AIMS immediately notifies the administrator — enabling rapid human intervention.
4. Employee notification support
EU AI Act Art. 26(7) requires deployers to inform employees about the AI system's use. AIMS provides templates and documentation for this purpose (request at info@workflo.hu).
What falls outside AIMS's scope
- AIMS provides tools and data — decisions remain human responsibility
- AIMS does not replace legal counsel or DPIA (Data Protection Impact Assessment)
- AIMS does not guarantee full EU AI Act compliance — that depends on your organisation's processes, policies, and human oversight
Key Deadlines
| Regulation | Effective | AIMS status |
|---|---|---|
| Prohibited AI systems (Art. 5) | 2 Feb 2025 | ✓ Monitored — instant alert |
| GPAI rules (Art. 51–56) | 2 Aug 2025 | ✓ GPAI category classified |
| Transparency obligations (Art. 50) | 2 Aug 2026 | ✓ Fulfilled |
| AI literacy obligation (Art. 4) | 2 Feb 2025 | ✓ Shadow-AI visibility provided |
| High-risk systems (Annex III) | 2 Dec 2027 (Digital Omnibus, 2026-05-07) | ✓ Risk category flagged |
This page is informational and does not constitute legal advice. AIMS provides compliance tools, but the ultimate interpretation and adherence to the EU AI Act is each organisation's own responsibility. We recommend engaging legal counsel in your compliance process.
Questions or to request a Data Processing Agreement: info@workflo.hu