The EU AI Act is no longer a future topic. Prohibited practices apply, general-purpose models have duties — and for property managers, 2026/27 focuses on what must be documented for AI pre-sorting, applicant screening or automated replies.
The good news: an assistant that pre-sorts email and drafts replies is manageable with human-in-the-loop. The bad news: black-box automation without approval and without logs is a compliance risk in 2026.
What can be high-risk for managers
Not everything is regulated equally strictly:
- AI-assisted tenant or owner screening decisions: critical — transparency, oversight, anti-discrimination law
- Biometric access control: especially sensitive (GDPR + AI Act)
- Pre-sorting inboxes, ticket categories, reply drafts with human approval: manageable if documented
- Pure accounting OCR in Immoware & co.: clarify provider duties + your deployer role
The distinction is not “AI yes/no” but whether the AI decides on access to housing or on people.
Deployer duties to prepare now
Even where some Annex III deadlines moved to December 2027, preparation pays off now — authorities and insurers increasingly ask for evidence:
- Inventory: which AI tools run where (casavi AI, Immoware OCR, Microsoft Copilot, custom agents)?
- Risk assessment per tool: data flow, EU storage, DPA, third-party training yes/no
- Human control: who approves? who can stop?
- Logs: what was auto-suggested vs manually sent, and when?
- Data-subject information: are tenants/owners told when AI is in the process?
Human-in-the-loop is not marketing
Approval must be technically possible — no auto-send from the model. That is exactly how I implement AI case assistants for managers: pre-sort, draft, human clicks send.
Practice: casavi, Immoware and Microsoft
In the market, ERP (Immoware), portal (casavi) and M365 converge. Immoware supplies accounting data, casavi communication — AI modules pre-sort tickets or calls. Microsoft is investing heavily in Copilot.
Your architecture questions in 2026:
- Which system is source of truth for personal data?
- Are prompts or documents used to train models? (Contractually exclude where needed)
- Do logs sit in DE/EU data centres?
Conclusion
The AI Act does not punish AI use but unreflective use. Document, approve and EU-host in 2026 — you gain speed without a liability lottery.
How I can help
I map your processes onto casavi/Immoware, choose GDPR-compliant AI building blocks and implement approval workflows. An initial call with a clear view of what is actually high-risk for you.