EU AI Act Compliance Is a Pipeline, Not a PDF

Turning the EU AI Act and ISO 42001 into automated CI/CD gates, risk classification, and cryptographic provenance — not a last-minute audit binder.

Kovcheg's credit module drafts decisions on customer applications. Under the EU AI Act, this is not an "assistant" — it is a high-risk AI system. Creditworthiness assessment of individuals is explicitly named in Annex III, which moves the system into a different legal class: a mandatory risk management system, technical documentation, logs, human oversight, registration. In parallel, the text assistant generating replies to customers falls under Art. 50 — transparency for AI-generated content. One system, two different sets of obligations.

Continue reading “EU AI Act Compliance Is a Pipeline, Not a PDF”