The EU AI Act imposes the strictest requirements on "high-risk" uses of AI, such as AI used to select job candidates or to decide whether a person can get a loan. Using AI to check business partners is not explicitly on that list. Should such systems nevertheless be subject to similar requirements for testing, documentation and human supervision?