DSGVO- & EU AI Act
konforme KI-Infrastruktur
40d 10h 28m 47s
Until 2 Dec 2026: Watermarking for gen-AI systems already on the market, plus the new Article 5 prohibitions
Then 2 Dec 2027 · High-riskThen 2 Aug 2028 · High-risk
Timeline
Not one deadline, four
The EU AI Act phases in across several dates. Article 50 transparency rules already apply. The Digital Omnibus, Regulation (EU) 2026/1744, moved the high-risk obligations to December 2027 and August 2028, but left everything else on the original schedule.
✓Article 50 transparency: in force since 2 Aug 2026
✓2 Dec 2026: watermarking for existing gen-AI systems
✓2 Dec 2027: Annex III stand-alone high-risk systems
✓2 Aug 2028: Annex I embedded high-risk systems
✓Art. 99 fines: up to €15M or 3% of worldwide turnover
Architecture
Sovereign by architecture
Xinity runs on your own hardware. Gateway, dashboard, daemon and database all sit inside your perimeter, so prompts and outputs never reach us. There is no Xinity-operated cloud holding your data, which is a different guarantee from a contractual one.
✓Zero data egress: inference stays on your infrastructure
✓No third-country transfer to assess in self-hosted deployments
✓You stay the controller; we supply software, not a data service
✓Apache 2.0 engine: the whole data path is auditable
Evidence
What you hand an auditor
Articles 11, 12 and 14 ask for technical documentation, logging and human oversight. Xinity produces the technical evidence. Risk classification, intended purpose and conformity assessment stay with you. No platform can do those for you.
✓Recorded LLM calls with model and deployment version
✓Role-based access control, SSO/SAML and 2FA
✓Multi-org tenant isolation and usage tracking
✓A written split of our controls and your obligations
Xinity provides infrastructure and controls designed to help you meet applicable GDPR and EU AI Act requirements. Compliance depends on your use case, configuration, governance processes and risk classification, and this page is not legal advice. Dates reflect Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744.