What’s Required
High-risk AI systems (Annex III) must undergo conformity assessment before deployment. Technical documentation, risk management system, quality management, human oversight design, accuracy/robustness/cybersecurity evidence.
Assessment Types
Most CRM-adjacent systems use internal conformity assessment (Module A). Some require notified-body involvement. Check Annex III + Article 43 for your system’s specific category.
Timeline
August 2, 2026 — high-risk enforcement starts. Realistic conformity preparation is 3–6 months minimum for mature AI systems, longer for new or complex ones. If you haven’t started, start.
Documentation Scope
Technical specs, training data sources and rationale, test results, risk analysis, mitigation measures, oversight design, deployment restrictions. Comprehensive — plan for hundreds of pages on complex systems.