Does the EU AI Act apply to US companies?

Yes, if you deploy AI systems in the EU or your AI's output affects EU residents. The EU AI Act has extraterritorial scope similar to GDPR. A US company selling an AI hiring agent to a European customer must comply. Even companies not directly selling in the EU should track the Act, as its standards are becoming de facto global benchmarks.

What does 'high-risk AI' mean under the EU AI Act?

The EU AI Act classifies AI systems by risk level. High-risk includes AI used in: employment and hiring, credit and insurance decisions, education, critical infrastructure, law enforcement, and migration management. High-risk AI requires conformity assessments, risk management systems, data governance, transparency, human oversight, and accuracy/robustness testing. Most business AI agents fall into the 'limited risk' category requiring transparency only, but AI agents making consequential decisions about people often qualify as high-risk.

AI Regulation

Written by Max Zeshut

Founder at Agentmelt · Last updated May 26, 2026

Laws, standards, and governance frameworks that govern the development, deployment, and use of AI systems—including AI agents. The regulatory landscape in 2026 includes the EU AI Act (risk-based classification requiring documentation, testing, and transparency for high-risk AI), US state-level AI laws (Colorado's SB 205, California's proposed regulations), sector-specific guidance (FDA for healthcare AI, SEC for financial AI, EEOC for hiring AI), and industry standards (ISO 42001 for AI management systems, NIST AI RMF). AI agents operating in regulated industries must navigate this evolving landscape as a core engineering and business requirement.

Example

A company deploying an AI agent for automated hiring screening in the EU must classify it as high-risk under the EU AI Act, maintain technical documentation, implement bias testing, provide transparency notices to candidates, enable human oversight, and register in the EU database. Non-compliance carries fines up to 3% of global revenue.

Frequently asked questions

Does the EU AI Act apply to US companies?: Yes, if you deploy AI systems in the EU or your AI's output affects EU residents. The EU AI Act has extraterritorial scope similar to GDPR. A US company selling an AI hiring agent to a European customer must comply. Even companies not directly selling in the EU should track the Act, as its standards are becoming de facto global benchmarks.
What does 'high-risk AI' mean under the EU AI Act?: The EU AI Act classifies AI systems by risk level. High-risk includes AI used in: employment and hiring, credit and insurance decisions, education, critical infrastructure, law enforcement, and migration management. High-risk AI requires conformity assessments, risk management systems, data governance, transparency, human oversight, and accuracy/robustness testing. Most business AI agents fall into the 'limited risk' category requiring transparency only, but AI agents making consequential decisions about people often qualify as high-risk.

Related glossary terms

Related niches

Back to glossary

Loading…