"High-risk," and the one exemption that probably will not save you

Edition 03. A reading time of about 5 minutes.

The hook

Somewhere in the vendor conversation, someone will float the idea that your tool is exempt: that it is technically not high-risk, so the heavy obligations simply do not apply. They are not inventing this. The AI Act does contain an exemption. But for hiring, it is narrow, it rarely lands, and reaching for it creates paperwork of its own. This edition is how the exemption actually works, so you can tell a real one from wishful thinking.

What this means

The exemption is real, and it is conditional. Article 6(3) says an Annex III system is not high-risk if it does not pose a significant risk of harm to health, safety, or fundamental rights, and it falls into one of four narrow boxes: it performs a narrow procedural task; it improves the result of a previously completed human activity; it detects decision-making patterns or deviations without being meant to replace or influence the human assessment; or it performs a preparatory task to an assessment (AI Act, Article 6(3)). Read those slowly. They describe tools that assist at the edges of a decision, not tools that rank or score the people inside it.

Then comes the sentence that closes the door for most hiring tools. The same article states that an Annex III system "shall always be considered to be high-risk where the AI system performs profiling of natural persons" (AI Act, Article 6(3)). Profiling, in the Act's sense, means automated evaluation of personal aspects of a person. A tool that scores, ranks, or evaluates candidates on their personal attributes is, in substance, doing exactly that, and for it there is no exemption, with no further conditions to argue about. A tool that only deduplicates applications or reformats a CV is not profiling, and might genuinely qualify. The line runs between assisting the process and assessing the person.

And the exemption is not a quiet opt-out. A provider who decides its system is not high-risk must document that assessment before the system is placed on the market, and must still register the system under Article 49(2) (AI Act, Article 6(3)). Claiming the exemption is therefore itself an obligation with a paper trail, not an escape from one. So when a vendor waves the exemption at you, the right reflex is not relief; it is to ask for that documentation.

What to do with this

Three moves keep you on the right side of this.

1. Default to high-risk for anything that scores, ranks, or evaluates candidates. That is profiling, and the exemption does not reach it. Start from "in scope" and make the vendor prove otherwise, rather than the other way around.
2. When a vendor claims the exemption, ask three things in writing. Which of the four conditions applies; whether they documented the assessment before going to market; and whether they registered the system under Article 49(2). This folds straight into the vendor questions from the last edition, and the answers either reassure you or warn you.
3. Reserve the exemption for genuinely procedural tools, the deduplicator, the formatter, the scheduler that touches no judgment, and even then keep your own short note of why. The exemption rewards tools that stay away from the decision, and only those.

The useful mental model is simple: the AI Act does not grant exemptions for being helpful. It withholds high-risk status only from tools that stay clear of judging the person. The moment a tool weighs the candidate, it is back in scope, and no amount of "it is just a feature" moves it out.

This is educational material and a starting point, not legal advice. The EU AI Act is still being amended, and the high-risk timeline rests on an agreement that is not yet final law. For how the Article 6(3) exemption applies to a specific tool, and before relying on any vendor's claim that a system is out of scope, consult a qualified lawyer. Signato is not a law firm and does not certify compliance.

AI that drafts at scale can also send the wrong thing at scale. See the Signato chamber block a forbidden send before it happens: run the free local trial, no card, nothing leaves your machine.