Article 6(3) lets an Annex III system avoid high-risk status if it poses no significant risk to health, safety or fundamental rights and meets at least one of four conditions. It never applies where the system profiles natural persons, and the provider must document the assessment before placing the system on the market.
The four conditions
The exemption applies where at least one of these is true:
- The system performs a narrow procedural task.
- It improves the result of a human activity that was already completed.
- It detects decision patterns or deviations from earlier patterns, and is not meant to replace or influence a completed human assessment without proper human review.
- It performs a preparatory task for an assessment relevant to an Annex III use.
On top of that, the system must not pose a significant risk of harm, including by materially influencing the outcome of decisions.
The profiling limit
An Annex III system that profiles natural persons is always high-risk. This is the point most often missed. A scoring model that builds a profile of an applicant does not escape through condition 1 or 4 simply because a human clicks approve afterwards.
Examples of how to reason
A tool that converts uploaded CVs into a standard format is a narrow procedural step. A tool that ranks candidates by predicted fit is profiling, so the exemption is unavailable.
A system that checks whether a human grader's marks deviate from past grading patterns and flags them for review fits condition 3, as long as it does not override the grader without human review.
These are illustrations of the reasoning, not legal determinations. Borderline cases need a legal read.
What you must write down
Article 6(4) says a provider that concludes its Annex III system is not high-risk must document its assessment before the system is placed on the market or put into service. The provider must also register the system under Article 49(2) and hand the documentation to national authorities on request.
A good record contains:
- The Annex III area considered.
- Which of the four conditions applies and why.
- Why no significant risk exists, with evidence.
- A statement on profiling.
- Owner, date and a review trigger.
A caution about drift
An exemption is tied to a particular use. If someone adds ranking, scoring or automatic action to a tool later, the conclusion can flip. Re-run the assessment on any change to what the system outputs or how people use it.
Treat the assessment as something a skeptical reader will open one day, whether a regulator, a customer's auditor or your own successor. Plain language beats clever reasoning. State the facts of the use, the condition you rely on, and what evidence supports the claim that the system does not materially influence the outcome.
Quick check
Can I self-declare that my system is not high-risk?
The exemption works through the provider's own documented assessment, but you must register the system and give the documentation to authorities on request. It is not a private decision with no trace.
Does human review save a profiling system?
No. Profiling of natural persons keeps an Annex III system high-risk regardless.
Sources
- AI Act Article 6, classification rules (an unofficial reader; confirm wording against the Official Journal)
- AI Act Annex III
Last reviewed: 19 October 2026.
