PS
PetroSentinel
EU AI ACT · AUGUST 2026 DEADLINE

Take our free EU AI Act assessment.
Check your readiness.

PetroSentinel maps your AI systems to EU AI Act requirements, classifies risk in real time, and delivers the audit trail your regulators expect — built for upstream, midstream, and downstream operations.

Take the free audit →
SRMKJALT
Trusted by compliance teams at 40+ energy operators
Oil refinery at sunset
40+
Energy Operators
EU AI Act Compliance Platform
Regulatory exposure

The EU AI Act is law. Non-compliance is expensive.

Regulation (EU) 2024/1689 is fully in force. For oil & gas operators running AI across drilling, HSE, SCADA, and workforce systems — most of the hard obligations hit in December 2027. That sounds distant. Building compliant systems takes 18–24 months.

Maximum fine — high-risk AI breach (Art. 99)
€15,000,000
— or —
3% of global annual turnover
Whichever is higher. For prohibited practices (e.g. emotion recognition of workers) the ceiling rises to €35m or 7% of global turnover. National market surveillance authorities can also order withdrawal, recall, and suspension of operations pending corrective action.
Key deadlines
Feb 2025
Prohibited practices ban + AI literacy (Art. 4, 5)
In force
Aug 2025
GPAI / LLM obligations (Art. 53–55)
In force
Aug 2026
Transparency obligations — AI-generated content (Art. 50)
6 weeks
Dec 2027
High-risk AI full obligations — Art. 9–17, 26, 72–73
Critical
Aug 2028
High-risk AI embedded in physical products (ATEX, Machinery)
Upcoming
As a deployer — Art. 26 (you can't contract these away)
!
Use AI only per the vendor's documented instructions — deviation exposes you as a de-facto providerArt. 26(1)
!
Assign trained, authorised humans to oversee each high-risk system — with genuine authority to intervene and overrideArt. 26(2)
!
Retain AI system logs for minimum 6 months — automatically generated, tamper-evidentArt. 26(6)
!
Notify affected workers before deploying AI that monitors or evaluates themArt. 26(7)
!
Report serious incidents to your AI provider within 24 hours — death, critical infrastructure disruption, irreversible harmArt. 73 + Art. 26(5)
If you build or substantially modify AI — Art. 9–17
↑
Full risk management system maintained throughout the AI lifecycle — covering intended use and reasonably foreseeable misuseArt. 9
↑
Data governance for all training, validation and test datasets — bias detection, provenance, representativenessArt. 10
↑
Annex IV technical documentation — architecture, datasets, validation metrics, post-market plan — before deploymentArt. 11
↑
Human override by design — fail-safe, graceful degradation, operator stop capabilityArt. 14
↑
Conformity assessment + CE marking before any deployment — internal control (Annex VI) or third-party notified body (Annex VII)Art. 43–48
Already in force — act now
!
AI literacy training for all staff who work with AI systems — mandatory across the whole organisationArt. 4 — live Feb 2025
!
Emotion recognition of workers is completely prohibited — any AI monitoring emotional state in the workplaceArt. 5 — live Feb 2025
!
LLM/foundation model documentation from your vendors — obtain Annex XI/XII compliance files from OpenAI, Microsoft, Google etc.Art. 53 — live Aug 2025
Your AI use cases — risk classification under EU AI Act
AI Use Case Risk Classification Key obligation trigger
Automated well control / blowout preventionHigh RiskAnnex I (Machinery/Pressure Equipment) or Annex III pt.2 if CER-designated
SCADA anomaly detection triggering shutdownsHigh RiskAnnex III pt.2 — direct safety function, CER-designated operator
Pipeline leak detection with protective responseHigh RiskAnnex III pt.2 — safety component, not merely informational
Fire/hazard detection triggering safe-stopHigh RiskAnnex III pt.2 — direct physical harm prevention
Biometric facility access controlHigh RiskAnnex III pt.1 — biometric identification
AI for recruitment, promotion, termination, performance scoringHigh RiskAnnex III pt.4 — always high-risk, regardless of sector
Worker monitoring / productivity tracking AICheck carefullyMay be high-risk under Annex III pt.4; emotion recognition is prohibited
Predictive maintenance (safety systems remain independent)Not High RiskOptimisation only — Commission example explicitly excluded
Drilling optimisation and performance analyticsNot High RiskInformational/optimisation — no direct safety function
Seismic interpretation and reservoir modellingNot High RiskScientific analysis tool — no Annex III trigger
Demand forecasting and trading algorithmsNot High RiskGoverned by MiFID II, not AI Act high-risk
Cybersecurity monitoring of OT/IT networksNot High RiskExplicitly excluded — Recital 55 cybersecurity carve-out
LLMs / Copilots used in operations (ChatGPT, Copilot etc.)GPAI obligationsArt. 53 in force Aug 2025 — obtain vendor compliance documentation
Emotion recognition of workersProhibitedArt. 5 — banned outright since Feb 2025 — immediate removal required
What our customers say

Compliance leads who've been through it.

"

We had 30+ ML models deployed across our North Sea operations with no clear picture of which ones the EU AI Act cared about. PetroSentinel gave us clarity in the first week.

SR
Sarah Ramsden
Head of Digital Compliance, Upstream E&P
"

The technical documentation our notified body needed would have taken our team three months to produce. PetroSentinel generated a first draft in an afternoon we refined over two weeks.

MC
Marco Carvalho
Legal & Regulatory Affairs, Midstream Ops
"

The risk classification engine understands energy use cases. It knew our SCADA anomaly detection was high-risk before we'd even finished the onboarding questionnaire.

LT
Lena Thorsheim
Chief HSE & Technology Officer
Free oil & gas self-assessment — 5 minutes

15 questions for oil & gas operators. Know your exposure before your regulator does.

Every question maps to a live legal obligation under Regulation (EU) 2024/1689 — scoped to upstream, midstream, and downstream operations. Answer honestly — a score below 60 means you have material regulatory exposure right now, not in December 2027.

Question 1 of 15
See your full results
Enter your details below to unlock your compliance score, risk verdict, and a personalised gap report.

No spam. Your results are sent by email. We may follow up with relevant EU AI Act resources for the energy sector. Article references are to Regulation (EU) 2024/1689.

This self-assessment is informational and does not constitute legal advice. Article references are to Regulation (EU) 2024/1689 (EU AI Act). High-risk AI obligations for critical infrastructure operators (including oil & gas) are in force.