The EU AI Act started enforcement in August 2024, full compliance expected by 2026. Risk-based classification means high-risk applications face stricter scrutiny. Architectural decisions about data governance, bias prevention, and audit trails are happening now, not later.