Skip to content
← All frameworks
AI governance

EU AI Act

The EU AI Act (Regulation 2024/1689) is the EU law on artificial intelligence. It sorts AI systems by risk and sets obligations for providers and deployers. Pair it with the AI System Register, where each system carries an EU AI Act risk tier.

EU Artificial Intelligence Act

what you get

What you get with EU AI Act.

  • EU AI Act available as a prebuilt framework
  • 73 requirements tracked with status and evidence
  • Backed by the AI System Register and risk tiers
how it works

Running EU AI Act in Varman

EU Artificial Intelligence Act is available in Varman as a prebuilt framework. The numbers below are what it contains in the product today. You add it to your workspace and work through it in the same place as your policies, risks, vendors, and evidence.

73
requirements
62
controls mapped
48
evidence tasks
20
policy templates
  1. 1. Add the framework

    Each EU AI Act requirement appears with its status, so you can see what is met and what is still open.

  2. 2. Connect your systems

    Integrations run scheduled checks against your cloud, identity, and developer tools and record the results as evidence. See the integrations.

  3. 3. Close the gaps

    Policies, tasks, and uploaded evidence cover what cannot be checked automatically. Readiness for EU AI Act updates as each item is completed.

  4. 4. Work with your auditor

    Varman organizes the evidence. Any audit, assessment, or certification is carried out by an independent third party, not by Varman.

questions

EU AI Act questions, answered.

When does the EU AI Act apply?

The Act entered into force on 1 August 2024 and applies in stages. The bans on prohibited practices and the AI literacy duty applied from 2 February 2025, and obligations for general-purpose AI models from 2 August 2025. Most other obligations, including those for high-risk systems, follow later.

How does the EU AI Act classify AI systems?

By risk. Practices with unacceptable risk are prohibited, high-risk systems carry the heaviest obligations, some systems such as chatbots carry transparency duties, and minimal-risk systems have no specific obligations. General-purpose AI models have their own set of rules.

What are the penalties under the EU AI Act?

The highest tier, for prohibited practices, reaches 35 million euros or 7% of worldwide annual turnover, whichever is higher. Lower tiers apply to other breaches.

How does Varman help with EU AI Act?

Varman ships EU AI Act as a prebuilt framework with 73 requirements, 62 mapped controls, 48 evidence tasks, and 20 policy templates. Integrations collect evidence automatically, and any audit or certification is done by an independent third party.

Related frameworks