EU AI Act · Deployers · Released October 2026

High-Risk by Annex III by Kai London

Most organisations will not build high-risk AI systems, but many will use them — in hiring, credit, education and essential services. This book sets out what the EU AI Act expects of deployers and how to put those obligations into practice.

What the book covers

Is it high-risk?

Identifying high-risk use cases in your organisation.

Deployer obligations

Use according to instructions, oversight, monitoring and logs.

Human oversight

Designing oversight that is meaningful, not a rubber stamp.

Impact assessment

Fundamental rights impact assessments where they apply.

Working with providers

What to require and verify from AI suppliers.

Evidence and incidents

Records, serious incident reporting and readiness for supervision.

This book offers general guidance and is not legal advice. It is independent and carries no endorsement by or affiliation with any regulator or standards body.

EU AI ActHigh-risk AIDeployersAI governance

Who it is for

Compliance, legal and risk leaders, AI programme owners, HR and operational teams using AI in high-risk contexts.

About the author

Professor Kai London — CISSP, CISM.

An internationally recognised cybersecurity executive, board advisor and Founder & CEO of Quantum AI Systems Security LLC, writing at the convergence of AI, governance and operational resilience. Honorary Professor and Researcher at UCL.