EU AI Act · Article 99 and Article 101
The statutory ceiling, and the three things it is not
Enter the assumptions and this computes the maximum a penalty could reach under the selected provision. It does not predict a fine — no tool can. What it can do is show which records decide how far below that ceiling you sit.
A · Maximum statutory ceiling under the selected assumptions
- Provision
- Articles 6–49 and 50 — high-risk obligations and transparency duties
- Rule applied
- Higher of the fixed cap or the turnover percentage
- Fixed maximum
- €15,000,000
- Turnover at 3%
- [ TO BE COMPLETED ]
[ TO BE COMPLETED ]
Maximum statutory ceiling under the selected assumptions
The dates you are actually on
Two dates moved in July 2026. Every other one did not. This is the calendar as it stands, for the answers above.
B · What this does not mean
Turnover is not stated, so no ceiling is computed. The tier is known; the figure is not.
Actual enforcement considers the nature, gravity and duration of the infringement, proportionality, intent or negligence, co-operation, mitigation, harm and other circumstances. Authorities may also issue warnings, order recalls, or remove a system from the single market — remedies frequently costlier than the fine.
C · Operational exposure
Your own answers, not a probability of being fined. An unanswered question is reported rather than assumed favourable.
- Is the violation ongoing?
- Were people affected?
- Were fundamental rights implicated?
- Was the conduct intentional rather than negligent?
- Was the authority informed?
- Was deployment paused?
- Was corrective action taken?
- Is the evidence complete?
- Is the system still in operation?
- Is there prior non-compliance?
- Is the organisation co-operating?
Operational exposure [ TO BE COMPLETED ]
11 unanswered — the rating is incomplete until they are answered, and an unknown is not a clean one.
D · What actually reduces it
The only section you can act on. Every item is a record kept before an incident, not an argument made after one.
Immediately
- Stop or restrict the affected AI use
- Assign an accountable owner
- Preserve logs and evidence
- Notify legal and compliance
- Assess who was affected
Within 30 days
- Complete the classification
- Confirm data and permission controls
- Implement human oversight
- Run the evaluation suite
- Establish an incident register
Within 90 days
- Complete governance approval
- Validate technical documentation
- Test monitoring
- Reassess the deployment
E · What this does not establish
A ceiling is a function of turnover and a provision. Your actual operational exposure is a function of four facts, and none of them is on this page.
- 1Which AI systems actually exist — including the ones nobody registered?The register
- 2What actor role does the organisation play for each one?Classify
- 3Which people, and which decisions, are affected?Classify
- 4Which controls and evidence already exist, and do they still hold?Obligations