Reg (EU) 2024/1689Generate dossier — €249
LIVE — Fines tracker · Obligations calendar · Transposition status — Updated weekly from EUR-Lex, Safety Gate, OEIL and 12 official sourcesView regulatory intelligence →

AI Act penalties: the three tiers of administrative fines under Article 99 of Regulation (EU) 2024/1689, in force since 2 August 2025.

Article 99 of Regulation (EU) 2024/1689 sets out three tiers of administrative fines, payable by AI operators that fail to comply with the regulation. The top tier — €35 million or 7% of worldwide annual turnover, whichever is higher — applies to violations of the Art. 5 prohibitions. The middle tier — €15 million or 3% — applies to violations of provider obligations (Art. 16), deployer obligations (Art. 26), and transparency under Art. 50, among others. The lower tier — €7.5 million or 1% — applies to supplying incorrect or misleading information to authorities. Chapter XII (penalties) applies from 2 August 2025 under Art. 113(b). For SMEs and start-ups, the lower of the two amounts applies, under Art. 99(6).

Generate AI Act dossier — €249Free: check your AI system risk

€249 one-time payment · 12 PDF documents in ZIP · 45 minutes · 100% in your browser

Regulation (EU) 2024/1689 · Article 11 + Annex IV · 12 documents · 100% browser-side — your data never leaves your machine

The numbers

€35M / 7%
Art. 99(3). Top tier for prohibited practices under Art. 5. Higher of the two amounts.
€15M / 3%
Art. 99(4). Middle tier for breaches of operator obligations: Arts. 16, 22, 23, 24, 26, 31, 33, 34, 50.
€7.5M / 1%
Art. 99(5). Lower tier for supplying incorrect, incomplete or misleading information to authorities or notified bodies.

The three penalty tiers, exactly as set out in Article 99

Article 99 distributes liability across three bands. For undertakings, the fine is the higher of the absolute amount and the percentage of worldwide annual turnover. For SMEs and start-ups, Art. 99(6) reverses this: the lower of the two amounts applies.

🇪🇺
Tier 1 — Prohibited practices (Art. 5)
€35M / 7%

Article 99(3). Non-compliance with the prohibition of the AI practices referred to in Article 5 shall be subject to administrative fines of up to €35,000,000 or, if the offender is an undertaking, up to 7% of total worldwide annual turnover for the preceding financial year — whichever is higher.

🇪🇺
Tier 2 — Other operator obligations
€15M / 3%

Article 99(4). Up to €15,000,000 or 3% of worldwide annual turnover, whichever is higher. Covers: provider obligations (Art. 16), authorised representatives (Art. 22), importers (Art. 23), distributors (Art. 24), deployers (Art. 26), notified bodies (Art. 31, 33(1)(3)(4), 34), and transparency obligations for providers and deployers (Art. 50).

🇪🇺
Tier 3 — Supply of incorrect / misleading information
€7.5M / 1%

Article 99(5). Supply of incorrect, incomplete or misleading information to notified bodies or national competent authorities in reply to a request: up to €7,500,000 or 1% of worldwide annual turnover, whichever is higher.

🏛️
Union institutions, bodies, offices and agencies
€1.5M / €750K

Article 100. The European Data Protection Supervisor may impose: up to €1,500,000 for non-compliance with Art. 5 prohibitions; up to €750,000 for other infringements.

Aggravating and mitigating factors (Art. 99(7)): nature, gravity, duration of infringement; whether other authorities have already fined for the same conduct; size, turnover, market share of the operator; previous infringements; degree of cooperation; intent or negligence; mitigation actions; and so on. Art. 99(10) requires appropriate procedural safeguards and effective judicial remedies.

Three common mistakes

COMMON MISTAKE

"€35M is the only AI Act fine"

There are three tiers under Art. 99. €35M / 7% (Art. 99(3)) only applies to violations of the Art. 5 prohibitions. Most of the day-to-day high-risk obligations — failing to produce technical documentation under Art. 11, failing to register, failing to implement QMS — are sanctioned under Art. 99(4) at €15M / 3%. Supplying wrong information to authorities is Art. 99(5) at €7.5M / 1%.

COMMON MISTAKE

"Fines only apply once the regulation is fully in force in 2026"

Chapter XII (Penalties) — including Art. 99 — applies from 2 August 2025 under Art. 113(b). From that date, fines can already be imposed for any obligation already in force, which includes the Art. 5 prohibitions (from 2 February 2025), Art. 4 AI literacy and the Chapter V GPAI obligations.

COMMON MISTAKE

"For our SME, the higher amount applies"

Art. 99(6) reverses the calculation for SMEs and start-ups: each fine referred to in Art. 99 shall be up to the percentages or amount referred to in 99(3), (4) and (5), whichever is lower. The percentage and absolute amount are still capped — only the choice between them flips.

Does the AI Act apply to your system?

Answer these four questions to determine your obligations.

Does your system use machine learning, logic-based, or statistical approaches?
Art. 3(1) — definition of "AI system"
Is the system placed on the EU market or does its output affect persons in the EU?
Art. 2(1) — territorial scope (extraterritorial via 2(1)(c))
Is your system used in any Annex III domain? (employment, credit, education, law enforcement, migration, justice, critical infrastructure, biometrics)
Art. 6(2) + Annex III — high-risk classification
Are you the provider (developer) or the deployer (user) of the system?
Art. 3(3) provider · Art. 3(4) deployer — different obligations

Take the full AI Act risk classification test →

What the ZIP contains

12 PDF documents generated from your inputs. Each cites the article of Regulation (EU) 2024/1689 it fulfils.

1

Risk Classification Report

Identifies whether your system is prohibited (Art. 5), high-risk (Art. 6 + Annex III) or subject to transparency obligations (Art. 50).

2

Technical Documentation

The 9 blocks of Annex IV in full: system description, training data, validation, performance metrics, risk management, human oversight. Art. 11 + Annex IV.

3

EU Declaration of Conformity

Signable document conforming to Art. 47 and Annex V.

4

Compliance Calendar

Key application dates: 2 Feb 2025, 2 Aug 2025, 2 Aug 2026, 2 Aug 2027. Art. 113.

5

Conformity Sheet

Executive summary of compliance status for authorities or commercial buyers. Art. 43 procedure.

6

Quality Management System (QMS)

QMS structure covering the 13 aspects required by Art. 17.

7

Deployer Instructions

Document for the entity deploying your system, conforming to Art. 13.

8

Evidence Checklist

Verifiable evidence list, cross-referenced to every Annex IV block.

9

Incident Report Template

Notification protocol conforming to Art. 73 (15 days general / 10 days death / 2 days widespread).

10

AI Literacy Programme

Training plan conforming to Art. 4, in force since 2 February 2025.

11

Post-Market Monitoring Plan

Plan structure required by Art. 72 and integrated into the technical documentation under Annex IV(9).

12

Fundamental Rights Impact Assessment (FRIA)

Template under Art. 27 for public bodies, private entities providing public services, and Annex III 5(b)(c) deployers.

See before you buy — Download a sample dossier (PDF, fictional company) — Real structure, real articles, real format. Fictional data.

Generated from your inputs, in your browser. No data leaves your machine.

What you pay

🧾 AI ACT COMPLIANCE CONSULTANCY
€5,000–€15,000
3–6 months. They explain the obligations to you.
✓ AICHECK
€249
12 documents. 45 minutes. Solves the documentation.

Technical documentation and conformity assessment: two layers

● LAYER 1

Technical documentation — Annex IV

12 documents. 45 minutes. €249. The documentation your system needs before being placed on the market.

∅ LAYER 2

Conformity assessment by notified body

If your system falls under Art. 43(1) (Annex III point 1 biometrics with notified-body route, or Annex I products), you will need third-party conformity assessment. That is a separate process. AICheck does not replace it.

We do not sell audits. We do not sell consultancy. We sell the tool that structures your documentation under Annex IV.

Penalty regime

Article 99 of Regulation (EU) 2024/1689. Chapter XII (Penalties) applies from 2 August 2025.

🇪🇺
Non-compliance with prohibited practices (Art. 5)
€35M / 7%

Art. 99(3). Up to €35 million or 7% of total worldwide annual turnover, whichever is higher. For SMEs and start-ups: whichever is lower (Art. 99(6)).

🇪🇺
Non-compliance with operator obligations (high-risk, transparency, deployer)
€15M / 3%

Art. 99(4). Includes failure to draw up technical documentation under Art. 11 + Annex IV. Covers obligations of providers (Art. 16), deployers (Art. 26), authorised representatives (Art. 22), importers (Art. 23), distributors (Art. 24), notified bodies (Art. 31, 33, 34) and transparency under Art. 50.

🇪🇺
Supply of incorrect, incomplete or misleading information
€7.5M / 1%

Art. 99(5). Applies when information provided to notified bodies or national competent authorities is wrong or misleading.

Documenting 5 or more AI systems?

If you operate multiple AI systems and need to document them all under Annex IV, contact us for volume pricing at hello@solidwaretools.com.

Request volume pricing
Reply within one business day

What AICheck guarantees, and what it does not

AICheck produces a document structured under Article 11 and Annex IV of Regulation (EU) 2024/1689 from the information you provide. The accuracy, truthfulness and completeness of that information is your responsibility as provider of the AI system.

We guarantee that the document structure follows Article 11 and Annex IV of Regulation (EU) 2024/1689 and that the legal references cited are correct as of the last verification date. We do not guarantee that a specific document will be accepted by a market surveillance authority in a given case, nor by a commercial buyer in a procurement process.

AICheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.

Frequently asked questions

Who enforces AI Act fines?
Member States designate national competent authorities responsible for penalties under Art. 99(1). The European Data Protection Supervisor handles fines against Union institutions, bodies, offices and agencies under Art. 100. Member States must notify the Commission of the rules on penalties and other enforcement measures, without delay and at the latest by the date of entry into application (Art. 99(2)). Members States report annually on fines issued (Art. 99(11)).
From when can fines be imposed?
Chapter XII (Penalties) applies from 2 August 2025 under Art. 113(b). Fines can be imposed for breaches of any obligation that is already in force at the time of the breach. Since Art. 5 (prohibitions), Art. 4 (AI literacy) and the Chapter V GPAI obligations apply earlier, breaches of those provisions are sanctionable from 2 August 2025 onwards. Annex III high-risk obligations apply from 2 August 2026 — breaches are sanctionable from that date.
Can EU institutions also be fined?
Yes. Article 100 covers Union institutions, bodies, offices and agencies. The European Data Protection Supervisor may impose administrative fines of up to €1,500,000 for non-compliance with Art. 5 prohibitions (Art. 100(2)) and up to €750,000 for other infringements (Art. 100(3)). Procedural safeguards under Art. 100(4) include the right to be heard.
Is this a subscription?
No. One-time payment. The licence includes 30 days of editing and 10 regenerations. The PDF you download is yours to keep.
Can I request a refund?
Pursuant to Article 16(m) of Directive (EU) 2011/83 on consumer rights, by activating the licence you give express consent to the immediate generation of digital content, waiving the 14-day withdrawal right. Refunds are only accepted in the case of a reproducible technical failure.
What if the regulation changes?
If the regulation changes while your licence is active, you can regenerate the document with the updated version of the generator at no additional cost.
⚠️ Important notice: AICheck is a documentary self-assessment tool, not legal advice nor a third-party audit. The document under Article 11 and Annex IV of Regulation (EU) 2024/1689 is generated from the data you input. The accuracy of that data is your responsibility. AICheck does not replace a qualified professional assessment.

Don't wait for the consultancy. Generate the Annex IV documentation for your AI system in your browser in 45 minutes.

Twelve documents. Annex IV fully structured. Regulation (EU) 2024/1689. Your data does not leave your machine. The ZIP you download is yours to keep.

€249 one-time payment
12 professional documents · 45 minutes · No subscription · 100% in your browser
Generate dossier — €249
✓ Last regulatory verification: 11 May 2026 · No substantive changes detected · View history