欧盟人工智能法案对美国企业的适用：域外合规指南
如果您的人工智能影响到欧盟公民，则欧盟人工智能法案适用于您——即使您的公司在欧盟没有任何业务。本指南解释了域外适用范围、欧盟代表要求以及美国总部企业可行的合规途径。
欧盟人工智能法案对美国企业的适用：域外合规指南
如果您的人工智能影响到欧盟公民，则欧盟人工智能法案适用于您——即使您的公司在欧盟没有任何业务。本指南解释了域外适用范围、欧盟代表要求以及美国总部企业可行的合规途径。
上次更新: 2026年7月4日
欧盟人工智能法案是否适用于您的美国公司？
是的，在以下任何一种情况下：
- 您将人工智能系统投放欧盟市场（销售、许可或向欧盟客户提供）
- 您提供的人工智能系统的输出在欧盟使用
- 您在欧盟部署人工智能系统，无论该系统托管在哪里
- 您是一家美国公司，其模型被集成到欧盟下游产品中
云托管的SaaS服务适用。可供欧盟用户访问的基于Web的人工智能工具适用。对于欧盟的影响，没有最低门槛。
欧盟代表要求
第五十二条要求非欧盟提供者指定授权代表：
高风险人工智能系统的非欧盟提供者必须在将系统投放欧盟市场之前，指定一家在欧盟设立的授权代表。该代表是欧盟监管机构的联系点，并且必须持有技术文档。
美国公司必须做什么
面向美国总部组织的实用合规路线图：
- 清点与欧盟有联系的人工智能系统
- 根据第六条/附件三对每个系统进行分类
- 对高风险系统实施第九条至第十四条的控制措施
- 如果您是高风险人工智能的非欧盟提供者，请指定一名欧盟代表
- 完成符合性评估和CE标志
- 在欧盟人工智能数据库中注册
- 确定哪个机构是您的主要监管机构（通常是您欧盟代表所在国家/地区）
与美国框架的互动
美国公司可以利用现有的合规计划：
- NIST AI RMF 与第 9 条的风险管理高度一致，并且是一个有用的对照表。
- 纽约市 LL144（关于人工智能偏见审计）与附件 III 中关于人工智能就业义务的内容重叠。
- 各州法律（科罗拉多州人工智能法案、康涅狄格州、伊利诺伊州）正朝着相似的基于风险的模型方向发展——一个内部程序可以适用于多个司法管辖区。
- SOC 2 / ISO 27001 不能替代人工智能法案的合规性，但其控制措施可以很好地配合。
How AIAgentree helps
For US-headquartered teams whose agents touch the EU, AIAgentree produces the decision-level evidence an EU representative or regulator can inspect — without EU-based infrastructure of your own.
- EU data residency in Germany keeps your agent decision records inside the EU, which simplifies the documentation your authorized representative must hold under Article 22
- Tamper-evident decision records with human-oversight and approval workflows give you Article 12/13/14-style evidence that maps cleanly onto the NIST AI RMF program you likely already run
- Python and TypeScript SDKs over REST, MCP, A2A, and OpenTelemetry, plus precedent search and audit-fit retention, let a US engineering team instrument agents once and satisfy EU inspection later
Continue exploring the EU AI Act guide
EU AI Act Compliance Guide
The complete guide to EU AI Act compliance for AI agents — start here.
Article 12 — Record-Keeping & Logging
What every high-risk AI system must log, and how to capture it.
Article 14 — Human Oversight
Designing effective human-in-the-loop controls for AI decisions.
Annex III — High-Risk AI Systems
Which AI use cases the Act classifies as high-risk.
EU AI Act Compliance Checklist
A step-by-step checklist to reach and document compliance.
Compliance Cost Calculator
Estimate your EU AI Act compliance effort and cost.
Deadlines & Timeline
Key enforcement dates, including the August 2, 2026 deadline.
Fines & Penalties
Penalty tiers up to €35M or 7% of global annual turnover.
Transparency Obligations (Art. 13 & 50)
Disclosure duties for AI systems and their outputs.
Risk Management & Conformity Assessment
Build a risk management system and assess conformity.
GPAI Obligations
Rules for providers of general-purpose AI models.
Omnibus Update
The latest changes to the EU AI Act timeline and rules.
Penalty Calculator
Estimate your maximum fine under the Article 99 tiers.
Article 11 + Annex IV
What technical documentation the EU AI Act requires.
Article 26: Deployer Obligations
What deployers of high-risk AI must do, including log retention.
Article 17: Quality Management
The QMS providers of high-risk AI must document.
Article 10: Data Governance
Data quality, bias mitigation, and governance duties.
Article 4: AI Literacy
The staff AI-literacy duty in force since February 2025.
Deployer vs Provider
Who bears which obligation — and when a deployer becomes a provider.
FRIA (Article 27)
Who must run a Fundamental Rights Impact Assessment, and how.
Who Does It Apply To?
Scope, operators, and the extraterritorial reach of the EU AI Act.
Post-Market Monitoring
Articles 72–73: ongoing monitoring and incident reporting.
ISO 42001 vs EU AI Act
How the voluntary standard and the binding law fit together.
NIST AI RMF vs EU AI Act
A practical crosswalk between the framework and the law.
EU AI Act for Healthcare
High-risk medical AI, MDR/IVDR interplay, and clinician oversight.
EU AI Act for Financial Services
Credit scoring, insurance pricing, and existing financial regulation.
EU AI Act for HR & Employment
Hiring AI as high-risk, plus NYC LL144 and EEOC overlap.