Annex III point 13 use cases
Biometrics
For organisations that need to classify biometric AI without mixing up prohibited practices, high-risk rules and privacy risk.
Point 1(a)Point 1(b)Point 1(c)
EU AI Act high-risk map
All Annex III high-risk AI domains
A practical overview of biometrics, critical infrastructure, education, HR, essential services, law enforcement, migration, justice and democratic processes.
Built on the Commission draft guidelines of 19 May 2026.
Each domain page links use cases to Article 6, Annex III and evidence.
Expert pages explain where classification and governance need extra attention in each domain.
Domains and use cases
Use this overview to assess which AI systems may be high-risk in each domain, which questions to answer and what evidence is needed.
Annex III point 23 use cases
Critical infrastructure
For operators, vendors and public or private infrastructure managers using AI where failures can affect safety and access to essential services.
Point 2Point 2Point 2
Annex III point 34 use cases
Education and vocational training
For education institutions, EdTech providers and L&D teams using AI for admission, assessment, level assignment or student monitoring.
Point 3(a)Point 3(b)Point 3(c)Point 3(d)
Annex III point 42 use cases
Employment and worker management
For organisations using AI in recruitment, selection, work terms, task allocation, monitoring or performance evaluation.
Point 4(a)Point 4(b)
Annex III point 54 use cases
Essential private and public services and benefits
For banks, insurers, public service providers and emergency services where AI can affect access to basic services or financial opportunities.
Point 5(a)Point 5(b)Point 5(c)Point 5(d)
Annex III point 63 use cases
Law enforcement
A trust-led overview for AI systems in law enforcement, focused on legal basis, fundamental rights and proportionality.
Point 6(a)Points 6(b)-6(c)Points 6(d)-6(e)
Annex III point 73 use cases
Migration, asylum and border control management
A legal and fundamental-rights driven overview for AI systems in migration, asylum and border control.
Point 7(b)Point 7(c)Point 7(d)
Annex III point 82 use cases
Administration of justice and democratic processes
For legal organisations, public institutions and civic tech teams using AI around legal assessment or democratic decision-making.
Point 8(a)Point 8(b)
Frequently asked questions
Short answers for classification, evidence and next steps under Annex III.
What does Annex III of the EU AI Act cover?
Annex III lists the high-risk AI domains that need to be assessed alongside Article 6. It covers biometrics, critical infrastructure, education, work, essential services, law enforcement, migration and justice.
Does every AI system in one of these domains become high-risk?
No. First confirm that the system is an AI system, then assess whether its intended purpose falls under Article 6(2) and a specific Annex III point. The Article 6(3) filter can still matter unless profiling or rights impact blocks that route.
How should this overview be used in governance work?
Start with the domain closest to the intended purpose, check the use cases from the guidelines, document the classification reason and then connect provider and deployer obligations to the evidence file.