EU AI Act-compliant AI vendors
AI vendors that publicly attest to compliance with the EU AI Act, including high-risk classification documentation where applicable.
The EU AI Act (Regulation (EU) 2024/1689) classifies AI systems by risk level and imposes obligations on providers and deployers. High-risk obligations apply in full from August 2026; general-purpose AI rules from August 2025. The vendors below publicly attest to EU AI Act compliance. For high-risk use cases, request the technical documentation, conformity assessment, and EU AI database registration where applicable.
Vendors with EU AI Act
Anthropic
Score 11.44 · low
Amazon (AWS)
Score 12.34 · low
Salesforce
Score 12.74 · low
Adobe
Score 13.74 · low
Cohere
Score 13.79 · low
IBM
Score 14.11 · low
Microsoft
Score 14.68 · low
SAP
Score 16.63 · low
OpenAI
Score 18.36 · low
Google DeepMind
Score 18.85 · low
Oracle
Score 19.89 · low
Palo Alto Networks
Score 19.89 · low
Mistral AI
Score 21.81 · moderate
Workday
Score 22.45 · moderate
Nvidia
Score 22.63 · moderate
Scale AI
Score 23.3 · moderate
Aleph Alpha
Score 24.29 · moderate
ServiceNow
Score 24.4 · moderate
PolyAI
Score 24.72 · moderate
Palantir
Score 25.09 · moderate
Cloudflare
Score 25.89 · moderate
Synthesia
Score 29.28 · moderate
Kyutai
Score 29.85 · moderate
Stripe
Score 29.97 · moderate
Twilio
Score 31.65 · moderate
Haystack (deepset)
Score 31.69 · moderate
Meta AI
Score 32.15 · moderate
Humanloop
Score 32.76 · moderate
H Company
Score 35.71 · moderate
Buyer checklist
- Confirm whether the vendor's system is classified as prohibited, high-risk, limited-risk, or minimal-risk.
- For high-risk systems, request the technical documentation and conformity assessment evidence.
- Verify EU AI database registration for high-risk AI systems placed on the EU market.
- For general-purpose AI providers, ask about systemic-risk assessment if the model exceeds the 10²⁵ FLOPs threshold.
- Cross-check that ISO 42001 (or equivalent management system) controls cover the EU AI Act technical documentation requirements.
Compliance is necessary, not sufficient. Holding EU AI Act is a meaningful baseline, but no certification covers AI-specific risk end-to-end. Layer this on top of vendor-specific diligence — sub-processor disclosure, training-data policy, model card transparency, dependency-chain mapping.