A risk-based AI security policy should set those boundaries before deployment.

The EU AI Act’s transparency requirements began applying on 2nd August 2026.

The Act also sets obligations for high-risk AI systems, including documented risk management and human oversight.

EU AI Act breaches can attract substantial, tiered penalties where its provisions apply.

Start by testing what AI agents can actually do The practical starting point is an AI security assessment.