Europe just gave hiring AI a 15-month reprieve, and vendors are spending it on acquisitions

Opinions expressed by Digital Journal contributors are their own.

The AI Act’s high-risk obligations for recruitment software now land on December 2, 2027. One European vendor spent the opening of that window buying a company whose product sits squarely inside them.

The European Union was supposed to start enforcing its strictest rules on artificial intelligence in hiring in August 2026. It isn’t. Under the Digital Omnibus agreement, the obligations covering high-risk AI systems now apply from December 2, 2027, a delay of roughly 15 months.

For companies building software that screens job applicants, this is the difference between a compliance sprint and a planning horizon. The category is not a small one. Annex III of the AI Act covers systems used to target job ads, filter applications, evaluate candidates, allocate tasks, and monitor performance. Deployers owe worker notification, human oversight, input-data quality and logging. Providers carry design, documentation and bias-testing duties. Penalties for deployers who miss their obligations run to 15 million euros or 3 percent of global turnover.

What happens to a market when a deadline like that slides is more interesting than the slide itself. The pessimistic read is that everyone stops work for a year. The evidence so far points somewhere else.

Barcelona-based Factorial, which sells human resources software to small and medium-sized businesses, acquired the Berlin AI company Empion in September. Empion’s product assesses candidates on skills, personality and cultural fit rather than by matching keywords in a resume, which places it squarely inside Annex III. The company was founded in 2021 by Annika von Mutius and Larissa Leitner, raised around $9 million, and counts Deutsche Telekom, Procter & Gamble and Siemens Mobility among its customers. Neither party disclosed the price.

Buying a high-risk AI product 15 months before the rules governing it take effect is a specific kind of decision. It assumes the compliance burden is survivable and treats the runway as time to absorb an asset rather than time to avoid one.

Jakob Steinschaden, writing in Trending Topics, read the purchase as a bet on product depth over price or distribution. “A challenger in that market can compete on price, on distribution or on feature depth,” he wrote. “Factorial is visibly betting on the third.” 

Steinschaden also argued that the buyer’s geography carries weight here. “A European vendor making a European acquisition has an easier position here than US competitors,” he wrote, “which explains part of Empion’s strategic value beyond the product itself.” He placed the deal against a broader pattern in which German technology companies that exit are bought by American acquirers at an above-average rate.

That regulatory framing deserves some skepticism. Being European confers no exemption. The AI Act applies to the system and its use, not to the passport of the company selling it, and a Barcelona vendor placing an assessment tool in a German employer’s hiring process carries the same provider obligations a California one would. What European incumbency plausibly buys is familiarity with the compliance posture customers already expect, and a shorter distance to the documentation those customers will ask for. That is an advantage in sales cycles. It is not an advantage in law.

The delay also creates a gap worth watching. High-risk systems already in service before December 2027 are largely grandfathered unless they undergo significant design changes. That gives a vendor a reason to ship and embed a product early, and it gives buyers a reason to ask which side of that line a tool they are evaluating will land on. Neither incentive is obviously good for the people being assessed.

Steinschaden noted what the Empion announcement left unstated: the purchase price, the split between cash and equity, the return to investors, and how many Berlin jobs survive long term. For a product that will eventually have to document its own decision logic to a regulator, the questions a buyer should be asking now are about continuity of engineering, not about the headline.

Fifteen months is enough time to build the documentation, the logging and the bias testing properly. It is also enough time to decide it can wait. Which of those the market chose will be legible well before December 2027, in who is hiring compliance engineers and who is not.