Map of the AI Act
Security monitoring by a SaaS company: cybersecurity alone is not a safety component
The map shows what hangs off this object: who carries the duty, what it calls for, what it is evidenced by and what it rests on. Click an object and it becomes the new centre.
On a small screen the map reads as a path rather than as a network.
example
Security monitoring by a SaaS company: cybersecurity alone is not a safety component
A software company supplies a SaaS platform that monitors network traffic at an operator of critical digital infrastructure and reports anomalous patterns to that customer's security team. Its developers see that use at such an operator may fall under point 2 of Annex III and wonder whether their own product therefore becomes a high-risk AI system.
relates to
Read at 2 Aug 2026. What did not yet apply on that date is not shown here. The transparency duties of article 50 apply, and the Commission can enforce against GPAI providers.