GitHub Copilot EU AI Act Compliance Profile
GitHub (Microsoft)
Your risk depends on how you use GitHub Copilot
| Usage Context | Risk Level | Obligations |
|---|---|---|
| Internal coding tool | MINIMAL | 3 obligations (~12h) |
| Customer support bot | LIMITED | 7 obligations (~32h) |
| HR screening / hiring | HIGH | 19 obligations (~120h) |
| Credit decisions | HIGH | 19 obligations (~120h) |
| Medical triage | HIGH | 19 obligations (~120h) |
Why this tool is classified as MINIMAL
AI pair programmer providing code completions and suggestions in IDEs.
Applicable Articles
Who does what
GitHub (Microsoft) (provider)Their job
- •Ensure AI Literacy of Staff (Article 4)
- •Disclose AI Interaction to Users — Chatbot/Assistant (Article 50(1))
- •Mark AI-Generated Content — Machine-Readable (Article 50(2))
- •Mark AI-Generated Images — C2PA/Watermark (Article 50(2))
- •GPAI: Technical Documentation per Annex XI (Article 53(1)(a)-(b) / Annex XI / Annex XII)
You (deployer)Your job
- •Ensure AI Literacy of Staff (Article 4)
- •Label Deep Fakes and AI-Generated Content for Public (Article 50(4))
- •Provide Explanation of AI Decisions to Affected Persons (Article 26(11) / Article 86)
- •Cooperate with Regulatory Authorities (Article 26(10) / Article 21)
Risk Assessment Reasoning
GitHub Copilot classified as GPAI model with systemic risk under Article 51-56 EU AI Act. Model exceeds 10M MAU threshold. Additional obligations apply including adversarial testing and incident reporting.
Similar Models
Frequently Asked Questions
What is GitHub Copilot's EU AI Act risk classification?
+
GitHub Copilot is classified as MINIMAL under the EU AI Act.
What are my obligations if I deploy GitHub Copilot?
+
As a GitHub Copilot deployer, you have 4 base obligations (~20 hours estimated effort). Key articles: Article 4, Article 50(4), Article 26(11) / Article 86, Article 26(10) / Article 21.
What is GitHub Copilot?
+
GitHub Copilot is a Unknown model. It has 0 downloads on HuggingFace.
What are the EU AI Act deadlines for GitHub Copilot?
+
Already passed: Ensure AI Literacy of Staff — 2025-02-02. Upcoming: Label Deep Fakes and AI-Generated Content for Public — 2026-08-02. Upcoming: Provide Explanation of AI Decisions to Affected Persons — 2026-08-02. Upcoming: Cooperate with Regulatory Authorities — 2026-08-02.
Check GitHub Copilot compliance in your codebase
One command to scan. Open-source CLI.