Annex III of the EU AI Act (Regulation (EU) 2024/1689) classifies four specific education uses as high-risk: admissions and access decisions, evaluation of learning outcomes, assessment of the appropriate level of education for an individual, and monitoring students for prohibited behaviour during tests. That fourth category covers most commercial exam-proctoring software. Because these systems influence a person’s access to education, providers and institutions face conformity-assessment, documentation and human-oversight duties — and, as of mid-2026, a revised compliance timeline that most procurement guidance has not yet caught up with.
Annex III is the section of the AI Act that lists the stand-alone use cases treated as high-risk regardless of sector, and education is one of eight listed domains. Under Article 6(2), any system matching an Annex III description is high-risk unless it falls within a narrow set of Article 6(3) exemptions for purely preparatory or narrow procedural tasks.
- What Annex III actually classifies as high-risk in education
- Why proctoring and admissions AI meet the high-risk threshold
- Conformity-assessment duties that follow
- What this means for procurement
- Common questions on Annex III education systems
What Annex III Actually Classifies as High-Risk in Education
Annex III, point 3, lists four education and vocational-training use cases. Each is high-risk in its own right, not as a bundled “education AI” category:
| Annex III, point 3 | What it covers | Typical real-world system |
|---|---|---|
| 3(a) Access and admission | Determining access, admission, or assignment of people to educational and vocational institutions at any level | Admissions-ranking algorithms; automated place-allocation tools |
| 3(b) Evaluating learning outcomes | Assessing outcomes, including where results steer a person’s subsequent learning path | Automated essay and short-answer scoring; adaptive-learning placement engines |
| 3(c) Assessing appropriate education level | Determining the level of education a person will receive or can access | Streaming and tracking tools; aptitude-based course-eligibility systems |
| 3(d) Monitoring prohibited behaviour | Detecting prohibited conduct by students during tests | Remote exam-proctoring software with anomaly or gaze detection |
This structure matters for procurement: a vendor’s product might satisfy only one limb (proctoring under 3(d)) while a different module of the same platform — an automated grading feature, say — separately triggers 3(b). Each function needs its own classification check rather than a single institution-wide judgement.
Why Proctoring and Admissions AI Meet the High-Risk Threshold
The AI Act treats education systems as high-risk because their outputs shape a person’s access to opportunity, not because the underlying technology is novel. Recital 56 explains that AI in education can determine “the educational and professional course of a person’s life” and, where biased or opaque, can perpetuate discrimination on grounds such as disability, ethnic origin or sexual orientation.
Two features push a system firmly into the high-risk tier. First, if the tool performs profiling of natural persons — building a behavioural or performance profile used in a decision — Article 6(3) removes the narrow-task exemptions entirely, so the system is automatically high-risk. Most commercial proctoring tools that flag “suspicious behaviour” patterns over time perform exactly this kind of profiling. Second, where a system’s error directly changes an admission, grading or progression outcome, it cannot credibly claim the “preparatory task only” or “improves a human decision” carve-outs in Article 6(3), because the human reviewer rarely has the practical capacity to re-examine every flagged case in full.
Conformity-Assessment Duties That Follow
Classification as high-risk is the trigger, not the end point. Providers placing an Annex III education system on the market must run it through conformity assessment under Article 43 before deployment, and both providers and deploying institutions then carry ongoing obligations:
- Establish and maintain a risk-management system across the tool’s lifecycle
- Use training, validation and test data that is relevant, representative and checked for bias
- Produce technical documentation demonstrating compliance, and enable automatic logging for traceability
- Complete a declaration of conformity, affix the CE marking, and register the system in the EU high-risk AI database under Article 49
- Deployers must run a fundamental rights impact assessment before first use, keep human oversight with real override authority, and tell students and applicants that a high-risk system is involved
None of these duties can be delegated to the software vendor by contract alone. An institution that deploys a high-risk admissions tool is a deployer under the Act and carries deployer-specific obligations even where the vendor, as provider, has already completed its own conformity assessment.
The compliance timeline itself has shifted since most existing guidance was written. Article 113 originally set 2 August 2026 as the date the Annex III obligations became applicable. On 7 May 2026, the European Parliament and the Council reached a provisional political agreement on the Digital Omnibus on AI, replacing that date with fixed extensions: 2 December 2027 for stand-alone Annex III systems (including education), and 2 August 2028 for Annex I product-embedded systems. Separately, the marking obligations under Article 50(2) now fall due on 2 December 2026. Until the agreed text is formally adopted and published in the Official Journal, the original 2 August 2026 date remains the legally binding one — institutions should treat the extension as highly likely, not yet certain.
| Obligation | Original deadline | Revised deadline (Digital Omnibus, agreed 7 May 2026) |
|---|---|---|
| Annex III stand-alone high-risk systems (education, employment, essential services) | 2 August 2026 | 2 December 2027 |
| Annex I product-embedded high-risk systems | 2 August 2027 | 2 August 2028 |
| Article 50(2) transparency/marking obligations | 2 August 2026 | 2 December 2026 |
What This Means for Procurement of Proctoring and Admissions AI
For institutions and publishers buying exam-proctoring, admissions-ranking or automated-scoring tools, the practical question is no longer “is this AI regulated eventually” but “which Annex III limb applies, and can the vendor prove it.” A procurement checklist built around Annex III should require vendors to confirm, in writing, before contract renewal:
- Whether each distinct feature of the product (scoring, proctoring, ranking) falls under Annex III, point 3(a)-(d), and if so, which limb
- Evidence of a completed or in-progress conformity assessment and EU database registration, or a documented Article 6(3) exemption assessment
- What training data was used, and what bias-testing was performed against protected characteristics
- What logging and traceability the institution will have access to for its own record-keeping duties as deployer
- Whether the tool performs any form of profiling, since this removes access to the narrow-task exemptions
Institutions with any EU touchpoint — joint degrees, EU-based applicants, satellite campuses — should apply the same checklist even where their primary jurisdiction sits outside the EU, because the Act’s extraterritorial scope catches systems whose output is used within the EU.
Common Questions on Annex III Education Systems
What Is Considered a High-Risk AI System Under the AI Act?
An AI system is high-risk if it is a safety component of a product covered by Annex I legislation, or if its use case appears in Annex III — covering biometrics, education, employment, essential services, law enforcement, migration and justice — unless it genuinely poses no significant risk under the narrow Article 6(3) exemptions.
Which Education Apps Are High-Risk Under the AI Act?
Annex III, point 3 names four categories: admissions and access tools, learning-outcome evaluation systems, tools assessing a person’s appropriate education level, and software monitoring students for prohibited behaviour in tests. Automated essay scoring and exam proctoring fall squarely within these limbs.
Can an Exam Proctor Be AI?
Yes — many institutions already use AI-based remote proctoring that analyses movement, gaze and audio to flag suspected cheating. Under the AI Act, this function sits within Annex III, point 3(d), making the software high-risk and subject to conformity-assessment and human-oversight duties, not a substitute human decision-maker.
Are Any Education AI Practices Banned Outright, Not Just High-Risk?
Yes. Since 2 February 2025, Article 5 has banned emotion-recognition systems in educational settings outright, with no research or institutional exemption, except narrow medical or safety uses. This sits above the high-risk tier — a banned practice cannot be brought into compliance through conformity assessment.
The classification logic behind Annex III will not soften even as its application date moves. Institutions and publishers procuring proctoring, admissions or scoring AI gain a longer runway to 2 December 2027, but the underlying duties — bias-tested data, documented conformity assessment, human override authority, and registration in the EU database — remain the fixed reference point for any system that touches a student’s access to education.
