[GH-ISSUE #21683] EU AI Act Compliance: Risk Classification & Transparency for Multi-Model Support #58218

New Issue

GiteaMirror · 2026-05-05T22:35:46-05:00

GiteaMirror commented

2026-05-05 22:35:46 -05:00

Originally created by @desiorac on GitHub (Feb 21, 2026).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/21683

Issue: EU AI Act Compliance Gap

Open WebUI supports multiple AI models (OpenAI, Anthropic, HuggingFace, local models) but lacks EU AI Act Article 6 compliance documentation.

Problem

Deployments in EU need formal documentation for:

Which models are high-risk (Art. 6)?
How user data is handled (GDPR + AI Act)?
Compliance checklist for deployments?

Proposed Solution

Add a COMPLIANCE.md with:

Model Risk Matrix (per provider + architecture)
Data Handling Policy (transparency for EU users)
Compliance Checklist (admin deployment guide)

Example Checklist

High-Risk Models (Art. 6):
  [ ] Classify training data source
  [ ] Document data retention
  [ ] Add user notices

General-Purpose (lower risk):
  [ ] Document input/output handling

Why It Matters

Open WebUI is open-source + EU-friendly = opportunity for compliance leadership
Users need audit trail for high-risk deployments
Competitive advantage in EU market

Call to Action

Interested in:

Compliance framework design
Testing approach
Community contribution structure

Ref: EU AI Act Article 6 | ArkForge Compliance Scanner

Originally created by @desiorac on GitHub (Feb 21, 2026). Original GitHub issue: https://github.com/open-webui/open-webui/issues/21683 ## Issue: EU AI Act Compliance Gap Open WebUI supports multiple AI models (OpenAI, Anthropic, HuggingFace, local models) but lacks **EU AI Act Article 6** compliance documentation. ### Problem Deployments in EU need formal documentation for: - Which models are high-risk (Art. 6)? - How user data is handled (GDPR + AI Act)? - Compliance checklist for deployments? ### Proposed Solution Add a `COMPLIANCE.md` with: 1. **Model Risk Matrix** (per provider + architecture) 2. **Data Handling Policy** (transparency for EU users) 3. **Compliance Checklist** (admin deployment guide) ### Example Checklist ``` High-Risk Models (Art. 6): [ ] Classify training data source [ ] Document data retention [ ] Add user notices General-Purpose (lower risk): [ ] Document input/output handling ``` ### Why It Matters - Open WebUI is open-source + EU-friendly = opportunity for compliance leadership - Users need audit trail for high-risk deployments - Competitive advantage in EU market ### Call to Action Interested in: - Compliance framework design - Testing approach - Community contribution structure --- **Ref**: EU AI Act Article 6 | ArkForge Compliance Scanner

GiteaMirror closed this issue

2026-05-05 22:35:47 -05:00

GiteaMirror commented

2026-05-05 22:35:48 -05:00

@pr-validator-bot commented on GitHub (Feb 21, 2026):

⚠️ Missing Issue Title Prefix

@desiorac, your issue title is missing a prefix (e.g., bug:, feat:, docs:).

Please update your issue title to include one of the following prefixes:

bug: Bug report or error you've encountered
feat: Feature request or enhancement suggestion
docs: Documentation issue or improvement request
question: Question about usage or functionality
help: Request for help or support

Example: bug: Login fails when using special characters in password

@pr-validator-bot commented on GitHub (Feb 21, 2026): # ⚠️ Missing Issue Title Prefix @desiorac, your issue title is missing a prefix (e.g., `bug:`, `feat:`, `docs:`). Please update your issue title to include one of the following prefixes: - **bug**: Bug report or error you've encountered - **feat**: Feature request or enhancement suggestion - **docs**: Documentation issue or improvement request - **question**: Question about usage or functionality - **help**: Request for help or support Example: `bug: Login fails when using special characters in password`

GiteaMirror commented

2026-05-05 22:35:51 -05:00

@Classic298 commented on GitHub (Feb 21, 2026):

You need to read up on the EU AI Act. It seems you have multiple misconceptions about some things.

Also what's the compliance.md gonna do about it? That's not required anywhere.

Open a discussion not an issue, search for duplicates (which evidently you also didn't do) and please follow our issue templates if you open an issue. It exists for a reason

@Classic298 commented on GitHub (Feb 21, 2026): You need to read up on the EU AI Act. It seems you have multiple misconceptions about some things. Also what's the compliance.md gonna do about it? That's not required anywhere. Open a discussion not an issue, search for duplicates (which evidently you also didn't do) and please follow our issue templates if you open an issue. It exists for a reason

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/open-webui#58218