These documents are template-level information for transparency. They are not certified legal translations or lawyer-approved equivalents in every language. For binding advice, consult qualified counsel. Enterprise customers receive executed MSA, Order Form, and counter-signed DPA — see Enterprise contracting.
Policy version: 2026-07-13 · EN
EU AI Act — AI Risk Classification Statement
Product: TrustOriginality.ai multimodal detection & compliance platform
Version: 1.0 · Date: 2026-06-22
Public URL:/regulatory/ai-risk-classification
This statement documents TrustOriginality's Article 6 risk classification under Regulation (EU) 2024/1689. It is information for customers and auditors, not legal advice.
1. Summary
| Item | Classification |
|---|---|
| TrustOriginality product | General-purpose B2B detection & documentation tool |
| Typical risk tier | Limited risk — transparency / deployer-support (Art. 50) |
| Annex III standalone high-risk system | No |
| Provider role | AI system provider of detection infrastructure |
| Customer role | Usually deployer of third-party or generative content |
TrustOriginality does not replace conformity assessment, CE marking, or national registration obligations that apply when a customer deploys a separate high-risk AI system.
2. Article 6 — Why we are not Annex III high-risk (standalone)
Annex III lists high-risk use areas (employment, education, law enforcement, migration, justice, critical infrastructure, etc.). TrustOriginality:
- Does not autonomously make hiring, grading, policing, or judicial outcomes.
- Returns probabilistic forensic signals with documented limitations.
- Requires customers to keep qualified human review in the loop (see Acceptable Use Policy).
- Prohibits sole automated Annex III decisions in contracts and API governance.
If a customer uses scores as the only input to an Annex III decision, the customer may trigger high-risk deployer obligations — mitigated by AUP, API blocks, and onboarding acknowledgments.
3. Obligations we implement (Art. 9 / Annex IV style)
| Obligation | TrustOriginality implementation |
|---|---|
| Risk management | Documented misuse risks, benchmark transparency, publish-gate thresholds |
| Technical documentation | Annex IV–style public file + panel technical page |
| Record-keeping | Activity log, compliance CSV/PDF, evidence ZIP, certificate keys |
| Human oversight | Required AUP acceptance; KYC/insurance APIs require humanOversightAcknowledged |
| Transparency (Art. 50) | JSON-LD labels, disclosure templates, audit exports |
We do not claim CE marking for TrustOriginality as a standalone Annex III product.
4. Prohibited customer use (Annex III)
See Acceptable Use Policy. API useCase values such as employment, education_grading, law_enforcement, migration, justice, and critical_infrastructure combined with sole automated decision mode are rejected.
5. Review & versioning
- Owner: Trust & Compliance
- Review cycle: Semi-annual or when EU AI Act guidance changes
- Related: Annex IV, AUP, DPIA template
