Announcing Agent Commander - The First Integrated solution from Veeam + Securiti.ai enabling the scaling of safe AI agents

View

Applicability of the EU AI Act

The modern business environment necessitates organizations to be highly proactive in all matters relevant to them. The same principle applies to regulatory compliance, where businesses need to be aware of how the latest regulations apply to them and what changes they'll need to make within their current operations to remain compliant.

Most businesses find themselves in a challenging position regarding the AI Act, unsure of the specific obligations they’re subject to owing to the AI Act’s unorthodox approach to applicability and how varied the relevant obligations can be depending on an organization’s relationship with the AI system.

Securiti’s infographic helps with the first and the most important step of regulatory compliance: assessing the applicability of a regulation. Once you have determined if and in what capacity the EU AI Act applies to you, Securiti can enable you to identify and comply with the relevant obligations.

DOWNLOAD INFOGRAPHIC

Award-winning technology, built by a proven team, backed by confidence. Learn more.

Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024, commonly referred to as ‘the EU AI Act’, is the world’s first comprehensive AI regulation. Laying down a uniform legal framework for the development and use of AI, the EU AI Act entered into force on August 01, 2024, and will become applicable in a graduated approach.

This infographic will help you determine the applicability of the EU AI Act by visualizing applicability triggers for different types of covered entities. By following the flowchart, you can determine whether and in what capacity you are subject to the provisions of the EU AI Act.

Applicability of the EU AI Act

Frequently Asked Questions Related to the EU AI Act Applicability

The AI Act will enter into force on 01 August 2024, the 20th day following its publication in the EU Official Journal. However, different provisions of the AI Act will become applicable in a graduated manner starting from 02 February 2025.

The AI Act defines four distinct risk categories: minimal, limited, high, and unacceptable. Each categorization carries specific compliance obligations, requiring organizations to undertake various measures. AI systems classified as high or unacceptable face the strictest obligations, which include thorough documentation and regular conformity assessments.

AI developers based outside the EU will also be subject to the AI Act’s provisions if the output produced by their AI systems is used in the EU.

Yes, certain AI systems are exempt from the AI Act’s provisions. These include AI systems that are deemed to be essential for safeguarding public security or are to be used exclusively for military purposes.

Penalties for non-compliance with the AI Act’s provisions can be quite severe, including fines as high as 6% of the organization's global annual turnover.

All-in-One Solution For Your Business Needs

The Multi-disciplinary practice to grow trust-equity of your brand and comply with privacy regulations

Agentic AI Security: OWASP Top 10 with Enterprise Controls

Map the OWASP Top 10 risks for agentic AI to enterprise-grade controls, identity, data security, guardrails, monitoring, and governance to stop autonomous AI abuse.

Strategic Priorities For Security Leaders In 2026

Securiti's whitepaper provides a detailed overview of the three-phased approach to AI Act compliance, making it essential reading for businesses operating with AI. Category: data security

Solution Brief: Microsoft Purview + Securiti

Extend Microsoft Purview with Securiti to discover, classify, and reduce data & AI risk across hybrid environments with continuous monitoring and automated remediation. Learn more.

Top 7 Data & AI Security Trends 2026

Discover the top 7 Data & AI security trends for 2026. Learn how to secure AI agents, govern data, manage risk, and scale AI safely.

The Future of Privacy: Top Emerging Privacy Trends in 2026

Access the infographic to discover the top emerging privacy trends in 2026. Learn what organizations must do to thrive in 2026 and beyond.

India’s DPDPA Rules

Access the infographic to learn about India’s DPDPA 2025 basics. Discover phased timelines, what the rules require, when they apply, key obligations, and much more.

DataAI Security For Healthcare

Secure PHI and sensitive clinical data, govern access, prevent breaches, and enable trusted AI with HIPAA-aligned DataAI Security for healthcare organizations.

DataAI Security For Telecom

Secure subscriber PII, CDRs, IMSI/IMEI, and OSS/BSS data while enabling AI across 5G and edge. Govern access, prevent exposure, and meet GDPR, NIS2, and ePrivacy.

7 Reasons Financial Institutions Are Failing at Data Access Governance And What to Do Before It’s Too Late

This infographic is designed to help CISOs, CDOs, and other security leaders understand why they must shift their access governance approach from user-driven to data-driven.

DataAI Security For Financial Services

AI in finance not only speeds up innovation but also risks. Learn how to accelerate safe AI adoption in the BFSI sector with Securiti.

Videos
View More
Mitigating OWASP Top 10 for LLM Applications 2025
Generative AI (GenAI) has transformed how enterprises operate, scale, and grow. There’s an AI application for every purpose, from increasing employee productivity to streamlining...
View More
Top 6 DSPM Use Cases
With the advent of Generative AI (GenAI), data has become more dynamic. New data is generated faster than ever, transmitted to various systems, applications,...
View More
Colorado Privacy Act (CPA)
What is the Colorado Privacy Act? The CPA is a comprehensive privacy law signed on July 7, 2021. It established new standards for personal...
View More
Securiti for Copilot in SaaS
Accelerate Copilot Adoption Securely & Confidently Organizations are eager to adopt Microsoft 365 Copilot for increased productivity and efficiency. However, security concerns like data...
View More
Top 10 Considerations for Safely Using Unstructured Data with GenAI
A staggering 90% of an organization's data is unstructured. This data is rapidly being used to fuel GenAI applications like chatbots and AI search....
View More
Gencore AI: Building Safe, Enterprise-grade AI Systems in Minutes
As enterprises adopt generative AI, data and AI teams face numerous hurdles: securely connecting unstructured and structured data sources, maintaining proper controls and governance,...
View More
Navigating CPRA: Key Insights for Businesses
What is CPRA? The California Privacy Rights Act (CPRA) is California's state legislation aimed at protecting residents' digital privacy. It became effective on January...
View More
Navigating the Shift: Transitioning to PCI DSS v4.0
What is PCI DSS? PCI DSS (Payment Card Industry Data Security Standard) is a set of security standards to ensure safe processing, storage, and...
View More
Securing Data+AI : Playbook for Trust, Risk, and Security Management (TRiSM)
AI's growing security risks have 48% of global CISOs alarmed. Join this keynote to learn about a practical playbook for enabling AI Trust, Risk,...
AWS Startup Showcase Cybersecurity Governance With Generative AI View More
AWS Startup Showcase Cybersecurity Governance With Generative AI
Balancing Innovation and Governance with Generative AI Generative AI has the potential to disrupt all aspects of business, with powerful new capabilities. However, with...

Spotlight Talks

Spotlight 50:52
From Data to Deployment: Safeguarding Enterprise AI with Security and Governance
Watch Now View
Spotlight 11:29
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Watch Now View
Spotlight 11:18
Rewiring Real Estate Finance — How Walker & Dunlop Is Giving Its $135B Portfolio a Data-First Refresh
Watch Now View
Spotlight 13:38
Accelerating Miracles — How Sanofi is Embedding AI to Significantly Reduce Drug Development Timelines
Sanofi Thumbnail
Watch Now View
Spotlight 10:35
There’s Been a Material Shift in the Data Center of Gravity
Watch Now View
Spotlight 14:21
AI Governance Is Much More than Technology Risk Mitigation
AI Governance Is Much More than Technology Risk Mitigation
Watch Now View
Spotlight 12:!3
You Can’t Build Pipelines, Warehouses, or AI Platforms Without Business Knowledge
Watch Now View
Spotlight 47:42
Cybersecurity – Where Leaders are Buying, Building, and Partnering
Rehan Jalil
Watch Now View
Spotlight 27:29
Building Safe AI with Databricks and Gencore
Rehan Jalil
Watch Now View
Spotlight 46:02
Building Safe Enterprise AI: A Practical Roadmap
Watch Now View
Latest
View More
Introducing Agent Commander
The promise of AI Agents is staggering— intelligent systems that make decisions, use tools, automate complex workflows act as force multipliers for every knowledge...
Risk Silos: The Biggest AI Problem Boards Aren’t Talking About View More
Risk Silos: The Biggest AI Problem Boards Aren’t Talking About
Boards are tuned in to the AI conversation, but there’s a blind spot many organizations still haven’t named: risk silos. Everyone agrees AI governance...
Largest Fine In CCPA History_ What The Latest CCPA Enforcement Action Teaches Businesses View More
Largest Fine In CCPA History: What The Latest CCPA Enforcement Action Teaches Businesses
Businesses can take some vital lessons from the recent biggest enforcement action in CCPA history. Securiti’s blog covers all the important details to know.
View More
AI & HIPAA: What It Means and How to Automate Compliance
Explore how the Health Insurance Portability and Accountability Act (HIPAA) applies to Artificial Intelligence (AI) in securing Protected Health Information (PHI). Learn how to...
Building A Secure AI Foundation For Financial Services View More
Building A Secure AI Foundation For Financial Services
Access the whitepaper and discover how financial institutions eliminate Shadow AI, enforce real-time AI policies, and secure sensitive data with a unified DataAI control...
Indiana, Kentucky & Rhode Island Privacy Laws View More
Indiana, Kentucky & Rhode Island Privacy Laws: What Changed & What Businesses Should Do Now
A breakdown of new data privacy laws in Indiana, Kentucky, and Rhode Island—key obligations, consumer rights, enforcement timelines, and what businesses should do now.
Agentic AI Security: OWASP Top 10 with Enterprise Controls View More
Agentic AI Security: OWASP Top 10 with Enterprise Controls
Map the OWASP Top 10 risks for agentic AI to enterprise-grade controls, identity, data security, guardrails, monitoring, and governance to stop autonomous AI abuse.
View More
Strategic Priorities For Security Leaders In 2026
Securiti's whitepaper provides a detailed overview of the three-phased approach to AI Act compliance, making it essential reading for businesses operating with AI. Category:...
View More
Take the Data Risk Out of AI
Learn how to prepare enterprise data for safe Gemini Enterprise adoption with upstream governance, sensitive data discovery, and pre-index policy controls.
View More
Navigating HITRUST: A Guide to Certification
Securiti's eBook is a practical guide to HITRUST certification, covering everything from choosing i1 vs r2 and scope systems to managing CAPs & planning...
What's
New