The Legal Stack EU AI Act First Enforcement Wave Report 2026: Classification Gap Is the Central Compliance Failure — Fewer Than One in Five EU Law Firms Have Completed a Formal AI Inventory

The Legal Stack published the Legal AI EU AI Act First Enforcement Wave Report 2026 (July 31) — the most detailed synthesis of legal sector EU AI Act compliance posture available before the August 2 Article 50 deadline. The central finding: the legal sector has a significant classification gap that regulators are beginning to notice. The tools in the grey zone are contract review automation, AI-assisted legal research, and automated legal advice interfaces — sitting at the contested boundary between the Act's limited-risk and high-risk categories. The European AI Office's March 2026 Guidance Note stated that Annex III's judicial-administration category should be read functionally, not institutionally: a tool performing substantive legal reasoning — applying law to facts to generate legal conclusions — does not avoid high-risk classification merely because its user is a lawyer rather than a judge. Vendors are classifying inconsistently: Harvey classifies its core functionality as limited-risk in its DPAs; Luminance describes itself as a decision-support tool and steers toward limited risk; Legalfly's April 2026 compliance whitepaper concluded it was not within the administration-of-justice threshold because it targets private practitioners. The Dutch RDI has prioritised legal and financial services AI for H2 2026 market surveillance reviews. For law firm innovation leads and GCs: the actionable implication is the 10-item Q4 2026 checklist — formal AI inventory, documented risk-tier classification for every tool, independent classification review (not just the vendor's), and Article 26 deployer obligation review even for tools the vendor has classified as limited risk.