What counts as high-risk AI?

High-risk AI systems include those used in recruitment, credit decisions, law enforcement, and critical infrastructure. The Act defines these based on the potential harm to fundamental rights and safety. Montro automatically classifies your AI tools against these criteria.

Do we need documentation for every AI tool?

High-risk systems require detailed technical documentation, risk assessments, and audit trails. Lower-risk tools have lighter requirements, but you must still maintain a register of all AI systems in use. Montro discovers shadow AI and builds your compliance register automatically.

How does the EU AI Act affect data processing?

The Act introduces transparency obligations around training data, model documentation, and bias testing. These sit alongside GDPR requirements, creating a dual compliance framework. Your data governance and AI governance must work together.

What penalties apply for non-compliance?

Fines reach up to 6% of global annual turnover for serious violations. Non-compliance with documentation or transparency requirements carries penalties up to 3%. Early action and demonstrable governance significantly reduce regulatory risk.

Book a demo Start free audit

The EU AI Act is here

Start free audit Book a demo

Countdown to the 2 August 2026 deadline

High-risk AI systems must be documented, classified, and under human oversight by this date.

—

Days

—

Hrs

—

Mins

—

Secs

Europe's AI regulation arrived in 2024. By early 2026, every organisation using AI must prove compliance or face fines up to 6% of global turnover. For mid-market firms, this means one thing: you need to know what AI systems you're running, where they sit on the risk spectrum, and whether you can defend them to a regulator.

Most organisations don't have this visibility yet. Shadow AI—tools your teams use without IT approval—sits in the blind spot. Spreadsheets don't scale. Manual audits take months. And the clock is ticking.

Montro was built for this moment. We're an EU-native platform designed to help CISOs, DPOs, and IT directors discover every AI tool in your organisation automatically, classify each one against the Act's risk categories, and build a compliance register that actually holds up under scrutiny.

This isn't theoretical compliance. This is the practical work of governing AI at scale, with the evidence regulators expect to see.

The organisations that act now will sleep soundly in 2026. The ones that wait will scramble.

Framework

Three tiers of obligation

The Act creates a risk-based structure. Prohibited practices are banned entirely. High-risk systems require governance, testing, and documentation. General-purpose models and lower-risk tools face lighter compliance burdens. Your organisation will use tools across all three tiers.

Prohibited

Prohibited practices

Certain AI uses are banned outright under the Act

High-risk

High-risk systems

These require documentation, testing, and continuous monitoring

General-purpose

Transparency obligations

Users must know when they're interacting with AI systems

Discovery

Automatic AI tool discovery and classification

Montro finds every AI system in your organisation, including shadow AI tools your teams use without IT approval. Each one is instantly classified against EU AI Act risk categories.

Shadow AI detection

Unsanctioned AI tools pose the greatest compliance risk. Montro's continuous scanning catches them before regulators do.

Risk classification

Every tool is mapped to prohibited, high-risk, or general-purpose categories. Your compliance posture becomes immediately visible.

Regulatory mapping

The Act intersects with GDPR, DORA, and NIS2. Montro shows you where each tool sits across all four frameworks.

Readiness

What you need for compliance

Continuous discovery and classification

Monitoring

Real-time alerts when new AI tools appear

Your inventory stays current as teams adopt new tools

Documentation

Built-in templates for high-risk AI documentation

Reduce the manual work of creating compliance records

Reporting

Audit-ready reports for boards and regulators

Demonstrate compliance with evidence, not promises

Speed

Weeks, not months, to full visibility

Practitioner reality

The work that actually matters

Manual discovery takes time. Montro maps your entire AI landscape in days, giving you the head start you need before 2026 deadlines arrive.

Efficiency

Stop building compliance registers in spreadsheets

Move from reactive scrambling to proactive governance

Assurance

Sleep knowing your AI governance is sound

Build the compliance muscle your board expects to see

FAQs

Everything you need to know about EU AI Act compliance and implementation

Learn more

The EU AI Act enters into force in phases, with the prohibition on high-risk practices taking effect first, followed by general obligations and transparency requirements. Most organisations must be compliant by early 2026, though some provisions apply sooner.

Find every AI tool running in your organisation

In 30 days. For free. No credit card. No long-term commitment. Just visibility.

Free 30-day AI Discovery Audit. No commitment.