EU AI Act 高风险合规期限推迟至 2027 年 12 月 — 对采购方意味着什么
AI Omnibus 于 2026 年 7 月 27 日生效,将高风险义务推迟至 2027 年 12 月 2 日。义务没有变,变的只是日期 — 而 16 个月够做一次架构变更,不是两次。
由 Software Tailor 团队撰写的长篇文章,涵盖受监管 AI 合规、本地部署模式、我们的产品,以及塑造它们的行业动态。每一项主张均附来源;每一篇文章均注明日期,并在底层事实变动时更新。
AI Omnibus 于 2026 年 7 月 27 日生效,将高风险义务推迟至 2027 年 12 月 2 日。义务没有变,变的只是日期 — 而 16 个月够做一次架构变更,不是两次。
The sticky routing strategy maps each caller to a preferred worker by an identity hash, so multi-turn chats keep landing on the box where the model is loaded and the prompt cache is hot — a deterministic mapping with no session table to replicate.
Mark a worker canary and give the pool a percentage: that share of callers, assigned consistently by identity hash rather than per-request coin flips, prefer the canary while everyone else stays on stable — and the two groups remain each other's failover.
Per-worker concurrency limits keep each GPU box in its sweet spot. A saturated worker is skipped; a fully saturated pool returns 503 with Retry-After immediately — honest backpressure instead of a silently growing queue that ends in a thrash or an OOM.
A served AI Server deployment's security posture in plain statements: fail-closed serving, keys hashed at rest, two credential tiers in a farm, forwarded pseudonymous identity, fingerprint pinning, and private TLS to workers — the default behavior a security review reads.
Every AI Server hosts a live dashboard and native Prometheus metrics, and its content-free audit attributes each request to app, install, and serving worker — so per-team, per-app chargeback is native data, no metering sidecar required.
A gateway that discovers its workers over mDNS on the local network, so scaling a small site is plugging in a prepared box — it advertises itself, the gateway probes it, and within a health-check cycle it is serving. Static core and dynamic discovery compose.
Serve both generations at once during a migration: modern OpenAI-compatible clients on the governed primary port, and pre-v2 clients on a scoped compatibility listener that carries a compiled sunset date — no flag-day, no broken scripts.
The compliance-hardened deployment: region-aware governance that fails closed where content scanning is mandated, on-device moderation, per-key quotas and budgets, and a content-free, signed audit an external auditor can verify offline, independently.
Upgrade workers and the gateway while traffic keeps flowing. A draining /readyz probe, a configurable drain hold, and gateway failover cover the requests racing the drain — no maintenance window.
Run one AI Server on the office GPU box and serve every workstation on the LAN over an API-key-authenticated endpoint. The model loads once, the data never leaves the building, and there are no per-token bills.
Run AI Server as one container on a cloud VM or any Docker host: configured entirely by environment variables, with /livez and /readyz probes and JSON logs so orchestrators manage it correctly. The image is the artifact; the volume is the state.
Every AI Suite app creates one loopback AI Server on your machine. It binds 127.0.0.1 only, needs no keys or licence, and shares one model in memory across every app on the box — the zero-exposure default worth understanding before anything is networked.
A farm whose workers carry different model sets. The gateway routes each request to a box that already has the model warm, and advertises the union of every worker's models as one catalog — so callers see one model list and placement is the gateway's problem.
One URL and one key in front of a pool of worker AI Servers: health-checked load balancing, transparent failover, model-aware routing, and Kubernetes auto-discovery — with no vendor cloud in the request path.
A ground-up rebuild of the shared engine behind AI Suite: host, download and run the AI models every app uses — one download, one library, one set of keys, used everywhere. Free serves this machine; Pro serves your whole network with governance. Free on Windows from the Microsoft Store.
Every Software Tailor AI app — Chatbot, Translate, Rewrite, Notepad, PDF Reader, Image Generation and more — in one window, with the local AI engine built in. Each app keeps its own model and history; your work stays on your device, saved encrypted. Free on Windows from the Microsoft Store; one Pro subscription unlocks the whole suite.
The full private AI chat for Windows: multi-session chats, folders, a prompt library, conversation branching, document chat and durable memory — all free on a local model that works offline, with encrypted on-device history. Pro adds tool use, Agent mode and larger or cloud models. Your existing chats and prompts upgrade in place. Free from the Microsoft Store.
Type a prompt and an original picture appears on your own PC — a built-in FLUX.2 [klein] model, negative prompts, seeds, batch generation and a private encrypted gallery. Free at 512×512; Pro unlocks larger sizes, custom steps and optional bring-your-own-key cloud. Free on Windows from the Microsoft Store.
A photo assistant that turns a folder of pictures into a searchable collection — AI captions, object detection, OCR, opt-in face grouping and semantic search, all on your device. Organise, annotate and remove backgrounds. Free on Windows from the Microsoft Store.
A ground-up rebuild: pick a model, type, and a local AI model streams the reply back on your own device — with an encrypted local history, find and search, and two simple context controls. Deliberately slim. Free on Windows from the Microsoft Store.
A ground-up rebuild built for reasoning models that think step by step — maths, logic, code — with a collapsible Thinking panel showing the chain-of-thought and a larger reply budget so answers aren't cut off. Free DeepSeek R1 model. Free on Windows from the Microsoft Store.
Type any text and hear it spoken in a natural voice — and clone a voice of your own from a short clip — right on your device. Offline by default, encrypted at rest, with a seekable player and WAV/MP3 export. Free on Windows from the Microsoft Store.
A simple notepad that formats itself as you write — plain text to Word, automatically — with on-device AI writing help, ask-your-document Q&A with citations, ask-across-all-open-documents, annotations and a readable dark editor. Free on Windows from the Microsoft Store.
Turn speech into text on your device — from your microphone, your computer's audio, or an audio file. Export subtitles, replay and re-transcribe recordings, keep an encrypted local history. Free on Windows from the Microsoft Store.
A ground-up rebuild: paste or import text, choose an action, tone and length, and a local AI model rewrites it on your device — with match-my-style, document import and an encrypted local history. Free on Windows from the Microsoft Store.
A ground-up, cross-platform rebuild: open a PDF and ask questions answered on-device, with clickable page-exact citations — in a full reader with annotations and bookmarks that travel in the file. Windows, macOS, Linux, plus a headless CLI/MCP server.
企业 AI 架构在 24 个月内已切换了默认选项。EU AI Act 的部署者义务、NIST AI RMF 的关键基础设施方向,以及 a16z 的成交周期数据都指向同一方向:数据驻留优先即新的云优先。
Software Tailor 已交付定制软件 19 年,零项目失败。四条工程纪律托起这一纪录。以创始人之口讲述这一数字背后的纪律。
OECD AI Policy Observatory 跟踪逾 80 个司法管辖区的 AI 政策。2026 年 6 月的 AI Policy Toolkit、GPAI 与 OECD 的合流,以及 EU AI Act omnibus 协议 —— 这是企业采购团队应当关注的三个信号。
AI Admin Console 暴露六项能力 —— Members、Licenses、AI Server 登记、Policy、Audit、按组织用量。每一项都对应一个采购与合规团队在 EU AI Act 与 NIST AI RMF 部署者义务下会提出的具体问题。
AI Suite 中每一项管理操作都会落入一行 JSONL 审计记录,包含时间戳、执行者与动作 —— 而不含任何 prompt 或响应内容。内容由部署者留存;我们保留某项操作发生过的证据。
企业 AI 采购卡壳在部署者义务上,而非技术上。2026 年化解卡壳的部署架构属性,以及为何「我们通过了 SOC 2」并非合规团队当下真正在问的问题之答案。
该法案的高风险部署者义务正于 2026 年分阶段生效。本地部署并不能绕开监管 —— 但它改变了哪些义务在实际操作中可被满足,以及哪些义务是云端 SaaS 根本无法满足的。
本地推理、客户掌控的审计,以及一套早已存在的采购流程。Software Tailor 的 AI 产品采用桌面安装程序而非我们云端租户的三个结构性原因。
每月新增更多文章。完整目录(包括下一批待撰写的积压主题)可在我们的代码仓库中查阅。
如果有某项法规、部署模式或行业问题希望我们撰写,请告诉我们。我们每月会选出一个新主题。