EU AI Act Classification
Where FlowSentric sits under Regulation (EU) 2024/1689 — and the obligations we meet for you.
SummaryLIMITED RISK
FlowSentric is a general-purpose AI workspace. It is not a prohibited practice (Art. 5) and is not a high-risk system (Annex III). It falls into the limited-risk category, whose duties are the transparency obligations of Art. 50 — which we implement by design. This is a light compliance burden, and we treat it as a trust asset for our customers.
1. The four risk tiers
The AI Act classifies systems into four tiers by risk. The vast majority of business AI software sits in the lower two.
| Tier | What it covers | FlowSentric |
|---|---|---|
| Unacceptable | Social scoring, manipulative or exploitative AI, untargeted facial scraping (banned, Art. 5). | Not applicable |
| High risk | Biometric ID, critical infrastructure, hiring, credit scoring, education, law enforcement, migration, justice (Annex III). | Not applicable by design |
| Limited risk | AI that interacts with people or generates content — transparency duties only (Art. 50). | This is us |
| Minimal risk | Everything else (spam filters, productivity tooling) — no obligations. | Some features |
2. Why we are not high-risk
A system is high-risk only if it is used for one of the purposes listed in Annex III. FlowSentric is a horizontal productivity tool — it is not built or marketed for any of them:
- No biometric identification or categorisation.
- No use in critical infrastructure operation.
- No automated decisions on employment, creditworthiness, insurance or access to essential services.
- No use in education scoring, law enforcement, migration or the administration of justice.
3. Transparency obligations we meet (Art. 50)
- AI is disclosed: chats, agents and embedded widgets make clear that a person is interacting with an AI system, not a human.
- Generated content is marked: images and video from the studio are identifiable as AI-generated (synthetic) content.
- Privacy by design: our PII-masking layer removes sensitive data before it reaches any third-party model.
4. General-purpose AI models (GPAI)
FlowSentric does not train or provide foundation models. We integrate third-party GPAI providers (OpenAI, Anthropic, Google and others) as a downstream deployer. Those providers carry the GPAI obligations of the Act for their own models.
5. Your responsibilities as a deployer
FlowSentric is a flexible tool. If you configure it to drive a high-risk use case in Annex III (for example, automated hiring or credit decisions), you become the deployer of a high-risk system and take on the corresponding obligations. We will support you, but that classification depends on how you use the platform.
6. Timeline
The Act applies in phases: prohibited practices since Feb 2025, GPAI rules since Aug 2025, and the Art. 50 transparency duties and high-risk rules from Aug 2026 onward. Our transparency measures are already in place.
This page is our good-faith self-classification for transparency; it is not legal advice. Have questions for a vendor assessment? Email hello@flowsentric.com — see also our Data Processing Agreement and Privacy Policy.