High-risk AI model evaluation under the EU AI Act: what changes now?

TL;DR: High-risk AI systems under the EU AI Act now face binding evaluation, documentation, and monitoring obligations, including bias testing, drift detection, and 15-day incident reporting, according to Openlayer. The compliance challenge is no longer model quality alone but producing traceable evidence that survives conformity assessment and post-market scrutiny.

NHIMG editorial — based on content published by Openlayer: High-Risk AI Model Evaluation Guide (July 2026)

By the numbers:

• Non-compliance carries fines of €15 million or 3% of global turnover for high-risk systems.
• Serious incident reports are due within 15 days under Articles 61 and 72.
• The August 2026 enforcement deadline for financial services is eight weeks away.

Questions worth separating out

Q: How should teams implement high-risk AI model evaluation under the EU AI Act?

A: Start by classifying the system against the Act’s high-risk categories, then define the evidence each release must produce.

Q: Why do fairness tests need to continue after deployment?

A: Because the relevant risk is not limited to the training set.

Q: How do organisations know whether audit evidence is ready for AI-led review?

A: Evidence is ready when it is current, linked, and explainable without manual stitching.

Practitioner guidance

• Build conformity evidence into the release pipeline Require every high-risk model release to attach versioned evaluation outputs, model artifact hashes, and sign-off records before promotion to production.
• Gate deployment on fairness and robustness thresholds Block deployment when demographic parity gaps exceed the approved limit or when robustness tests fail against adversarial and edge-case inputs.
• Tie post-market monitoring to a named escalation owner Assign one accountable owner for drift alerts, incident triage, and Article 72 reporting so monitoring output leads to action rather than review backlog.

What's in the full article

Openlayer's full article covers the operational detail this post intentionally leaves for the source:

• The exact evaluation matrix mapping Article 9, 10, 15, 43, 61, and 72 obligations to concrete evidence artefacts.
• Practical implementation examples for threshold gates, drift alerts, and documentation checks in CI/CD pipelines.
• A worked explanation of how Annex IV documentation supports conformity assessment without forcing manual reconstruction.
• The article's specific examples of fairness, robustness, and monitoring metrics for high-risk deployments.

👉 Read Openlayer's high-risk AI model evaluation guide for EU AI Act compliance →

High-risk AI model evaluation under the EU AI Act: what changes now?

Explore further

View Full Forum →  |  NHI Foundation Course →