The AI Act classifies systems depending on their capabilities and their intended use, and the risk that they pose on the people using or being exposed to them. If a tool ends up being classified as a high-risk AI system or as a model with systemic risk there are strict requirements in terms of reporting incidents. For certain types of incidents it is as little as two days, for others upwards of 15 days.