Free tool
Estimate your maximum exposure under Article 99 of the EU AI Act. Enter your annual worldwide turnover and see what the three tiers of fines could look like for your business — including the reduced caps for SMEs and startups.
Based on Article 99 of Regulation (EU) 2024/1689.
This tool estimates the maximum administrative fine a company could face under the EU AI Act's three-tier structure. Article 99 sets the caps: up to €35 million or 7% of global annual turnover for using a prohibited AI practice (Article 99(3)), up to €15 million or 3% for breaching provider, deployer, transparency or notified-body obligations (Article 99(4)), and up to €7.5 million or 1% for supplying misleading information to authorities (Article 99(5)). For each breach the higher of the fixed cap and the percentage applies — except for SMEs and startups, where Article 99(6) reverses the rule so the lower figure applies.
Fines are already live: the Article 5 prohibitions have been enforceable since 2 February 2025, and the penalty regime under Article 99 applies from 2 August 2025. Article 50 transparency breaches become fineable from 2 August 2026; high-risk obligation breaches follow the deferred Annex III (2 December 2027) and Annex I (2 August 2028) dates under the Digital Omnibus, adopted 29 June 2026.
Two inputs. We calculate the rest live.
Use your total global annual turnover for the preceding financial year. Fines are capped on a per-infringement basis.
SMEs and startups get the lower of fixed or percentage — not the higher.
Standard rule: the higher of the fixed cap or the turnover percentage applies.
Use of a banned practice under Article 5 (e.g. social scoring, real-time biometric categorisation). Highest tier: up to €35M or 7% of worldwide turnover.
€35,000,000
Maximum fine
The higher of the two applies.
Breach of high-risk obligations (Articles 8–27, 43, 49), notified body duties, or GPAI provider obligations (Articles 51–56). Up to €15M or 3% of turnover.
€15,000,000
Maximum fine
The higher of the two applies.
Supplying incorrect, incomplete or misleading information to notified bodies or national competent authorities. Up to €7.5M or 1% of worldwide turnover.
€7,500,000
Maximum fine
The higher of the two applies.
These figures are the ceiling — the regulator looks at intent, duration, cooperation and dozens of other factors when setting an actual fine. Start with our free classifier to see what risk level your AI system falls into, then work through the compliance checklist.
Witness turns your classification into a tracked obligation list and generates the documents the AI Act requires: technical documentation, transparency notices and more. Starter unlocks the online generators.
See tiersArticle 99 of the EU AI Act defines three tiers. Use of a prohibited practice under Article 5 is punishable by up to €35M or 7% of worldwide annual turnover, whichever is higher. Breach of most other obligations (high-risk AI, notified body duties, GPAI obligations) can cost up to €15M or 3% of worldwide turnover. Supplying misleading information to regulators is capped at €7.5M or 1% of turnover. The higher of the two applies for standard companies.
For each tier the regulator compares a fixed EUR cap with a percentage of your worldwide annual turnover from the preceding financial year and applies the higher of the two. Turnover is counted group-wide. The actual fine within that ceiling depends on the nature, gravity and duration of the infringement, whether the violation was intentional or negligent, how the company cooperated with authorities, the size of the operator and the extent of any financial benefit gained.
Yes. Article 99(6) flips the rule for SMEs, including startups: the lower of the fixed cap or the turnover percentage applies instead of the higher. In practice this caps a small company's exposure to the percentage-based figure, which can be a fraction of the headline numbers. SME status is defined by the EU recommendation 2003/361/EC (fewer than 250 employees and either turnover ≤ €50M or balance sheet ≤ €43M).
This calculator provides non-binding estimates of maximum statutory fines under Article 99 of Regulation (EU) 2024/1689. It is not legal advice. Actual fines depend on the specific circumstances of an infringement and the decision of the competent national authority.
Worried the ceiling looks survivable? Most of the real cost of an audit is the work to prevent one — compare Witness compliance tiers to see what compliance management costs, and the documents and public trust page you get to show for it.
Two guides that put these numbers in context: