AI Governance & Compliance · CBE

Your AI
must comply with EU AI Act

CBE guides Israeli AI companies to compliance with the EU AI Act, ISO 42001 and ISO 42005 — from AI risk assessment to full certification.

Free consultation

Why CBE for AI?

EU AI Act in effect from 2025
Fines up to 35M€ / 7% of turnover
ISO 42001
The world's first AI management standard
AI Risk Classification
Identify risk level and build a compliance plan
30 years | 100% success
Guidance from day one to certification
EU AI Act — 4 risk levels

Is your AI High Risk?

The EU AI Act classifies every AI system by its risk level. CBE sorts your AI and builds a tailored compliance plan.

UNACCEPTABLE RISK

AI banned outright

AI systems that are completely banned in the EU.

Examples: Social Credit Scoring, biometric emotion recognition, exploitation of vulnerabilities

HIGH RISK

High-risk AI

Requires Technical Documentation, Risk Management and Conformity Assessment.

Examples: AI for credit, hiring, medical diagnosis, law enforcement, education

LIMITED RISK

Limited-risk AI

Mandates transparency — disclosing that the user is interacting with AI.

Examples: Chatbots, Deep Fakes, Emotion Recognition

MINIMAL RISK

Minimal-risk AI

No mandatory requirements — but adopting a code of ethics is recommended.

Examples: Spam filters, chess AI, content recommendations

🧠

GPAI — General Purpose AI Models

Models like GPT, Claude, Gemini — subject to transparency and copyright requirements. Models with Systemic Risk (over 10²⁵ FLOPS) are subject to stricter requirements.

CBE's AI Compliance Assessment Tool

Automated assessment for EU AI Act and ISO 42001 — instant risk-level identification and compliance plan.

Go to assessment tool
Solutions by domain

Your AI by sector

CBE specializes in tailored AI Governance guidance for every sector.

Fintech & Financial AI

AI algorithms for credit and insurance are classified as High Risk. CBE guides compliance and ISO 42001 + DORA.

Health AI & Medicine

AI for diagnosis and treatment — High Risk. ISO 42001 + ISO 13485 + HIPAA. CBE builds a medical AI Governance framework.

AI for Recruiting & HR

AI systems for CV screening and candidate ranking — High Risk. Strict anti-bias requirements and GDPR for personal data.

Chatbots & GenAI

Chatbots and GenAI — Limited Risk. Transparency duty to the user + GPAI compliance.

Industrial AI & OT

AI for predictive maintenance and quality control — High Risk for critical infrastructure. ISO 42001 + ISO 27001 + NIS2.

AI for Autonomous Vehicles

ADAS and autonomous driving — High Risk + TISAX + UNECE requirements.

Government AI

AI in policing and public services — High/Unacceptable Risk with stringent requirements.

AI Analytics & BI

BI tools with AI — Minimal Risk. ISO 42001 and GDPR for personal data.

AI for Cyber & Security

AI for threat detection and SIEM — Limited/High Risk depending on use. ISO 27001 + ISO 42001 + NIST CSF.

Timeline

When to be ready?

✓ Completed

August 2024 — official publication

EU AI Act published in the Official Journal and entered into force.

✓ Completed

February 2025 — prohibitions

Unacceptable Risk AI is banned from operating in the EU.

✓ Completed

August 2025 — GPAI

GPAI requirements in effect — transparency, copyright, systemic risk.

⚠️ Approaching — start now

August 2026 — High Risk AI

Every High Risk AI requires Conformity Assessment and registration in the EU Database.

Future

2027 — safety products

AI in products covered by existing safety regulations.

EU AI Act fines

What happens if you don't comply?

35M€ / 7%

Unacceptable Risk violations

Using AI that is completely banned.

15M€ / 3%

High Risk & GPAI violations

Marketing High Risk AI without Conformity Assessment.

7.5M€ / 1.5%

Incorrect info to authorities

Providing incorrect information to the European AI Authority.

The fine = the higher of the fixed amount or % of global turnover
Frequently asked questions

AI Act — the questions everyone asks

Yes. The AI Act is extra-territorial — it applies to any organization that develops, imports or uses AI offered in the European market. An Israeli company marketing AI to the EU must comply with the Act.

Consultation call — free and no obligation

Not sure what applies to your AI? CBE performs an AI Risk Classification — within 48 hours you'll know exactly what the requirements are.

CBE — AI Governance experts

30 years of experience guiding ISO certification and regulation. We built Israel's first AI Compliance tool and guide AI companies from day one to certification.

Prefer to talk?

03-5105232

Address

Nationwide service

CBE's AI Compliance tool

Automated assessment EU AI Act + ISO 42001

euaiact.cbe.co.il