Skip to content
Innopulse Consulting
EU AI Act

High-risk AI systems: Operator and provider obligations

If your AI system is classified as high-risk, these are the concrete Article 9–15 obligations you must meet — with implementation checklists.

Leutrim Miftaraj
Leutrim Miftaraj
Founder & CEO
·3 min read

Why Swiss and DACH firms can't ignore this

Most DACH SMEs we speak with underestimate how broadly the AI Act reaches. They assume it's a problem for OpenAI-scale providers or for narrowly defined high-risk domains. The reality is more uncomfortable: if your HR team uses an AI-assisted CV screen, if your customer support runs on a chatbot, if your marketing team generates content with a large language model — you are a deployer under the Act, and high-risk AI applies to you.

Core concepts you need to hold straight

Before going into implementation, it's worth fixing the vocabulary. A surprising amount of the practical confusion around high-risk ai systems comes from people using the same words to mean different things. Here are the definitions we work with internally at Innopulse:

High-risk ai — in the context of high-risk ai systems, this refers to the operational reality most DACH SMEs encounter when they move from theory to implementation. The term gets used loosely in marketing material; the regulatory and practical definitions are tighter and worth pinning down.

Ai act article 9 — in the context of high-risk ai systems, this refers to the operational reality most DACH SMEs encounter when they move from theory to implementation. The term gets used loosely in marketing material; the regulatory and practical definitions are tighter and worth pinning down.

Ai act article 10 — in the context of high-risk ai systems, this refers to the operational reality most DACH SMEs encounter when they move from theory to implementation. The term gets used loosely in marketing material; the regulatory and practical definitions are tighter and worth pinning down.

Ai act technical documentation — in the context of high-risk ai systems, this refers to the operational reality most DACH SMEs encounter when they move from theory to implementation. The term gets used loosely in marketing material; the regulatory and practical definitions are tighter and worth pinning down.

Practical implementation: the path we recommend

The move from reading about high-risk ai systems to actually implementing it is where most SMEs stall. In our experience, the blockage is rarely capability — it's sequencing. Attempting to do everything in parallel burns out the small team that's responsible; attempting to do it in the wrong order means early work has to be redone.

What we've seen fail

The first is scope creep disguised as ambition. A project scoped to address high-risk ai systems gradually expands to address everything adjacent. By month three, the original deliverable is two quarters away and the team has lost focus. The fix is ruthless: write down what's out of scope as explicitly as what's in.

The lens we apply

On high-risk ai systems specifically, our internal practice has evolved considerably. The early version was manual, error-prone, and didn't scale past three products. The current version is partly automated, documented in runbooks, and survives the addition of new products without degradation.

Where this is heading

Stepping back from the immediate operational picture, high-risk ai systems points at some broader shifts in how Swiss and DACH firms are going to operate over the next 24–36 months.

Your next sensible step

If you're reading this because you have an active project around high-risk ai systems, here are the next steps we'd suggest — based on where most SMEs we work with are starting from.

Either way: pick your first step, put a calendar date on it, and start.

About the author
Leutrim Miftaraj
Leutrim Miftaraj
Founder & CEO · Innopulse Consulting

Founder and principal engineer of Innopulse Consulting. MSc Innovation Management (FFHS). Author of "Identity Over Discipline".

Topics
high-risk AIAI Act Article 9AI Act Article 10AI Act technical documentation
Working on something similar?

Let's talk.

If this article maps to a problem you're actively working on, send us a short description — we'll respond with a practical next step.