Which AI use cases in real estate are high risk under the EU AI Act?

A score used to decide whether a natural person is offered housing evaluates creditworthiness in substance, which is the likely reading of Annex III point 5(b) when the outcome is a rental decision rather than a loan, though the annex text itself only names creditworthiness evaluation and credit scoring. The provider of such a high risk system carries risk management, data governance and conformity assessment obligations; the deployer, the landlord or property manager, must use it according to its instructions, ensure human oversight, monitor its operation and keep logs under Article 26, and, where it falls under Annex III point 5(b), carry out a fundamental rights impact assessment under Article 27.

Annex III point 5(b) lists AI systems used to evaluate the creditworthiness of natural persons or establish their credit score. A system that approves, refers or conditions a mortgage for a consumer falls under it, with risk management, data governance, logging, human oversight and conformity assessment obligations.

An agent that answers questions, books tours and takes requests falls under the transparency duty of Article 50. It becomes high risk under Annex III point 5(b) if it evaluates the creditworthiness of applicants, for example in tenant screening, and under point 5(a) if a public body uses it to decide eligibility for social housing or other public assistance.

For a typical portal search assistant, the default tier is limited: it falls under the Article 50 transparency duty. It becomes high risk under Annex III point 5(a) only in the narrower case where it is used by a public body or on its behalf to decide eligibility for social housing or other public assistance, which a listing search assistant rarely does. Separately, steering or discriminatory treatment in the answers themselves is unlawful under fair housing and equal treatment law regardless of the AI Act tier.

Extraction alone is minimal risk: reading and structuring the terms of a commercial contract does not decide credit, employment, insurance, biometric identification or another use listed in Annex III, so it carries only the Article 4 AI literacy duty. The conversational assistant that lets employees ask questions about a lease adds Article 50(1): people who interact directly with it must be told they are dealing with an AI system, unless that is obvious from the context, as it usually is for an internal tool.

Tracking built quantities against a BIM model and schedule is not itself an Annex III use. Annex III point 4 covers employment, the management of workers and access to work as a self employed person, and brings a system into that category under point 4(b): AI used to make decisions affecting work related relationships, or, quoting the regulation, "to monitor and evaluate the performance and behavior of persons in such relationships", meaning employees, subcontracted individuals and others in a work related relationship with the organization. Measuring the quantities and pace of the work itself, without naming or ranking a crew or an individual, stays out of that category. This page's own weekly meeting step (howItWorks, step 5) keeps the measurement at the level of the trade's output for exactly this reason: using the same per trade pace data to evaluate or discipline a named crew member or subcontracted individual would stretch the system into that high risk category. Treat any such individual level use as high risk and apply the controls below to it, rather than relying on element level scoping alone.

An automated valuation model values the collateral, not the person, so it is not itself listed in Annex III; the EU Mortgage Credit Directive treats property valuation (Article 19) and the creditworthiness assessment of the borrower (Article 18) as separate steps, and Article 18(3) says the creditworthiness assessment must not be based predominantly on the value of the property exceeding the amount of credit, or on an assumption that the property's value will increase. The valuation becomes relevant to Annex III point 5(b), creditworthiness assessment of natural persons, only where its output is built into a separate system that evaluates the borrower's creditworthiness, and whether that happens depends on how the lender designs the credit decision, not on the valuation model itself.

Answering questions and giving indicative estimates from published rules is limited risk with an Article 50(1) disclosure that the customer is talking to an AI system. If the assistant evaluates an individual's creditworthiness to decide or filter access to a loan, it falls under Annex III point 5(b) and is high risk.

Classification and indexing of documents for a person to review may fall under the Article 6(3) derogation for narrow procedural tasks, if the provider documents that assessment. That derogation does not apply once the system profiles a natural person: calculating a named borrower's qualifying income from their pay stubs and bank statements evaluates that person's economic situation, which is profiling under GDPR Article 4(4). A system intended to calculate qualifying income for the credit decision is high risk under Annex III point 5(b), evaluating the creditworthiness of natural persons, whether or not a person reviews its output. Human oversight of that output is a separate obligation under Article 14, not a way to take the system out of the high risk category.

Article 50(1): people must be told they are interacting with an AI system unless that is obvious. Finding locations and booking appointments does not fall under any Annex III category. If a healthcare version starts to triage patients by urgency, or a public body uses it to decide eligibility for a public service, reassess it against Annex III point 5.

Optimizing HVAC equipment is not listed in Annex III. Point 2 covers AI safety components in the management and operation of critical infrastructure such as the supply of water, gas, heating or electricity, and a building's own HVAC controller does not manage infrastructure at that level. The system also does not decide credit, employment, access to essential services or another high risk use. Under Article 6(1), an AI system that is a safety component of a product covered by Annex I harmonization legislation, such as the Machinery Regulation, and that needs third party conformity assessment, would be high risk regardless of Annex III; this is why the guardrails on this page keep the AI out of fire, life safety and code required ventilation sequences rather than letting it override them.