EU AI Act の高リスク期限が 2027 年 12 月へ — 購買側にとって何が変わるのか
AI Omnibus は 2026 年 7 月 27 日に発効し、高リスク義務を 2027 年 12 月 2 日へ移しました。変わったのは日付だけで義務は変わっていません — そして 16 か月で買えるのはアーキテクチャ変更 1 回分です。
規制 AI へのコンプライアンス、オンプレミス導入パターン、当社製品、そしてそれらを形作る業界動向について、Software Tailor チームが執筆する長文記事です。すべての主張に出典を明示し、すべての記事には公開日を記載し、根拠となる事実に変化があれば更新します。
AI Omnibus は 2026 年 7 月 27 日に発効し、高リスク義務を 2027 年 12 月 2 日へ移しました。変わったのは日付だけで義務は変わっていません — そして 16 か月で買えるのはアーキテクチャ変更 1 回分です。
The sticky routing strategy maps each caller to a preferred worker by an identity hash, so multi-turn chats keep landing on the box where the model is loaded and the prompt cache is hot — a deterministic mapping with no session table to replicate.
Mark a worker canary and give the pool a percentage: that share of callers, assigned consistently by identity hash rather than per-request coin flips, prefer the canary while everyone else stays on stable — and the two groups remain each other's failover.
Per-worker concurrency limits keep each GPU box in its sweet spot. A saturated worker is skipped; a fully saturated pool returns 503 with Retry-After immediately — honest backpressure instead of a silently growing queue that ends in a thrash or an OOM.
A served AI Server deployment's security posture in plain statements: fail-closed serving, keys hashed at rest, two credential tiers in a farm, forwarded pseudonymous identity, fingerprint pinning, and private TLS to workers — the default behavior a security review reads.
Every AI Server hosts a live dashboard and native Prometheus metrics, and its content-free audit attributes each request to app, install, and serving worker — so per-team, per-app chargeback is native data, no metering sidecar required.
A gateway that discovers its workers over mDNS on the local network, so scaling a small site is plugging in a prepared box — it advertises itself, the gateway probes it, and within a health-check cycle it is serving. Static core and dynamic discovery compose.
Serve both generations at once during a migration: modern OpenAI-compatible clients on the governed primary port, and pre-v2 clients on a scoped compatibility listener that carries a compiled sunset date — no flag-day, no broken scripts.
The compliance-hardened deployment: region-aware governance that fails closed where content scanning is mandated, on-device moderation, per-key quotas and budgets, and a content-free, signed audit an external auditor can verify offline, independently.
Upgrade workers and the gateway while traffic keeps flowing. A draining /readyz probe, a configurable drain hold, and gateway failover cover the requests racing the drain — no maintenance window.
Run one AI Server on the office GPU box and serve every workstation on the LAN over an API-key-authenticated endpoint. The model loads once, the data never leaves the building, and there are no per-token bills.
Run AI Server as one container on a cloud VM or any Docker host: configured entirely by environment variables, with /livez and /readyz probes and JSON logs so orchestrators manage it correctly. The image is the artifact; the volume is the state.
Every AI Suite app creates one loopback AI Server on your machine. It binds 127.0.0.1 only, needs no keys or licence, and shares one model in memory across every app on the box — the zero-exposure default worth understanding before anything is networked.
A farm whose workers carry different model sets. The gateway routes each request to a box that already has the model warm, and advertises the union of every worker's models as one catalog — so callers see one model list and placement is the gateway's problem.
One URL and one key in front of a pool of worker AI Servers: health-checked load balancing, transparent failover, model-aware routing, and Kubernetes auto-discovery — with no vendor cloud in the request path.
A ground-up rebuild of the shared engine behind AI Suite: host, download and run the AI models every app uses — one download, one library, one set of keys, used everywhere. Free serves this machine; Pro serves your whole network with governance. Free on Windows from the Microsoft Store.
Every Software Tailor AI app — Chatbot, Translate, Rewrite, Notepad, PDF Reader, Image Generation and more — in one window, with the local AI engine built in. Each app keeps its own model and history; your work stays on your device, saved encrypted. Free on Windows from the Microsoft Store; one Pro subscription unlocks the whole suite.
The full private AI chat for Windows: multi-session chats, folders, a prompt library, conversation branching, document chat and durable memory — all free on a local model that works offline, with encrypted on-device history. Pro adds tool use, Agent mode and larger or cloud models. Your existing chats and prompts upgrade in place. Free from the Microsoft Store.
Type a prompt and an original picture appears on your own PC — a built-in FLUX.2 [klein] model, negative prompts, seeds, batch generation and a private encrypted gallery. Free at 512×512; Pro unlocks larger sizes, custom steps and optional bring-your-own-key cloud. Free on Windows from the Microsoft Store.
A photo assistant that turns a folder of pictures into a searchable collection — AI captions, object detection, OCR, opt-in face grouping and semantic search, all on your device. Organise, annotate and remove backgrounds. Free on Windows from the Microsoft Store.
A ground-up rebuild: pick a model, type, and a local AI model streams the reply back on your own device — with an encrypted local history, find and search, and two simple context controls. Deliberately slim. Free on Windows from the Microsoft Store.
A ground-up rebuild built for reasoning models that think step by step — maths, logic, code — with a collapsible Thinking panel showing the chain-of-thought and a larger reply budget so answers aren't cut off. Free DeepSeek R1 model. Free on Windows from the Microsoft Store.
Type any text and hear it spoken in a natural voice — and clone a voice of your own from a short clip — right on your device. Offline by default, encrypted at rest, with a seekable player and WAV/MP3 export. Free on Windows from the Microsoft Store.
A simple notepad that formats itself as you write — plain text to Word, automatically — with on-device AI writing help, ask-your-document Q&A with citations, ask-across-all-open-documents, annotations and a readable dark editor. Free on Windows from the Microsoft Store.
Turn speech into text on your device — from your microphone, your computer's audio, or an audio file. Export subtitles, replay and re-transcribe recordings, keep an encrypted local history. Free on Windows from the Microsoft Store.
A ground-up rebuild: paste or import text, choose an action, tone and length, and a local AI model rewrites it on your device — with match-my-style, document import and an encrypted local history. Free on Windows from the Microsoft Store.
A ground-up, cross-platform rebuild: open a PDF and ask questions answered on-device, with clickable page-exact citations — in a full reader with annotations and bookmarks that travel in the file. Windows, macOS, Linux, plus a headless CLI/MCP server.
エンタープライズの AI アーキテクチャは 24 か月でデフォルトが変わりました。EU AI Act の deployer(導入者)義務、NIST AI RMF の重要インフラに関する方向性、a16z の取引サイクルデータのいずれもが同じ方向を指しています。所在地ファーストは新たなクラウドファーストです。
Software Tailor は 19 年間にわたり、プロジェクト失敗ゼロでカスタムソフトウェアを納入してきました。この実績を支える 4 つのエンジニアリングルール。数字の裏側にある規律を、創業者の言葉で語ります。
OECD AI Policy Observatory は 80 を超える法域にわたる AI 政策を追跡しています。2026 年 6 月の AI Policy Toolkit、GPAI と OECD の統合、そして EU AI Act omnibus —— エンタープライズの調達チームにとって重要な 3 つのシグナルを解説します。
AI Admin Console は 6 つの機能を提供します —— メンバー、ライセンス、AI Server 登録、ポリシー、監査、組織別利用状況。それぞれが、EU AI Act および NIST AI RMF の deployer(導入者)義務の下で調達およびコンプライアンス部門が問う具体的な問いに対応しています。
AI Suite のすべての管理アクションは、タイムスタンプ、アクター、アクションを記録した JSONL の監査行に着地し、プロンプトやレスポンスのコンテンツは一切含まれません。コンテンツは deployer(導入者)が保持し、当社はアクションが発生したという証跡を保持します。
エンタープライズの AI 調達が停滞するのは、技術ではなく deployer(導入者)義務が原因です。2026 年に停滞を解消する導入アーキテクチャの特性、そしてコンプライアンス部門が今問うている問いに対して「当社は SOC 2 に準拠しています」が誤った回答である理由を解説します。
EU AI Act の高リスク deployer(導入者)義務は 2026 年を通じて段階的に施行されます。オンプレミス導入は規制を回避するものではありません。しかし、どの義務を現実的に充足できるか、そしてクラウド SaaS では充足できない義務がどれかを変えます。
ローカル推論、顧客が制御する監査ログ、そして既に確立された調達プロセス。Software Tailor の AI 製品が当社クラウド上のテナントではなくデスクトップインストーラーである、3 つの構造的な理由を解説します。
記事は毎月追加されます。執筆予定のバックログを含む全カタログは、当社リポジトリで管理しています。
取り上げてほしい規制、導入パターン、業界の疑問などがあれば、お知らせください。毎月 1 本の新規記事を選定しています。