Practical guidance for European SMEs. No legal jargon, no fearmongering. Just what the regulation requires and what to do about it.
Pick the area you need.
What every EU business must do first: understand whether the Act applies, train staff, and meet the Article 4 AI-literacy duty.
Article 4 has been law since February 2025, and the Digital Omnibus rewrote it in July 2026. Here is what it actually requires now — and the five concrete steps to be defensible.
Read more →Thinking the free version of an AI tool keeps you outside the EU AI Act? It does not. Here is what Article 4 actually requires from deployers, regardless of what they paid.
Read more →If your staff are using ChatGPT at work, your company is almost certainly a deployer under the EU AI Act — and Article 4 already requires you to act. Here is what AI literacy really means in practice.
Read more →If your employees are using ChatGPT at work, your company may already have legal obligations under the EU AI Act. Here is what HR Directors and Compliance Officers need to know right now.
Read more →Which AI uses are banned, which count as high-risk, and the duties that apply to HR, recruitment, chatbots and deepfakes.
If your company uses AI in hiring, credit scoring, or benefits decisions, you may already be operating a high-risk system under Annex III of the EU AI Act. Here is what each category means in practice.
Read more →If your company uses AI in recruitment, performance reviews, or workforce planning, Article 26 makes you the accountable party. Here is exactly what HR teams must do before the 2 December 2027 deadline.
Read more →AI Act Article 50 transparency obligations are already in force for deployers using chatbots and synthetic content tools. Here is exactly what you must label, disclose, and document before your next customer interaction.
Read more →Article 5 of the EU AI Act has banned eight AI practices outright since February 2025, with fines up to €35 million or 7% of global turnover, and two more bans apply from December 2026. Here is what every European deployer needs to understand.
Read more →If your company uses AI to screen CVs or rank candidates, you are a high-risk AI deployer under the EU AI Act. Here is exactly what Article 26 requires you to do before the 2 December 2027 deadline.
Read more →Build the paper trail: an AI inventory, a regulator-ready evidence file, ISO 42001 alignment, and who owns what under the Act.
An AI compliance evidence file is the single most important document bundle your company needs before the high-risk rules apply in December 2027. Here is exactly what goes in it and who owns it.
Read more →Most SaaS companies are simultaneously an AI provider and an AI deployer under the EU AI Act — and that dual role doubles your compliance obligations. Here is how to work out exactly where you stand.
Read more →Every EU AI Act compliance obligation starts with one thing: knowing which AI systems you actually deploy. Here's how to build a complete AI system inventory in under 30 minutes.
Read more →The EU AI Act and ISO 42001 cover similar ground, but one is law and one is a management framework. Here's what each requires, where they overlap, and what European SMEs actually need to do.
Read more →When a national authority opens an EU AI Act regulator inspection, the first five questions are predictable. Here is exactly what they will ask, and how to have your answers ready before they knock.
Read more →When enforcement starts, who enforces it, and what non-compliance with the EU AI Act can actually cost.
2 August 2026 has passed and national authorities now supervise the EU AI Act. But the Digital Omnibus on AI rewrote Article 4, moved the high-risk dates and added new bans. Here is exactly what changed and what your company should do now.
Read more →The EU AI Act carries fines up to €35 million or 7% of global turnover for prohibited practices, and lower tiers for everything else. Here is exactly how those numbers work, who sets them, and what an SME can do to avoid the worst outcomes.
Read more →How the EU AI Act and the GDPR overlap, and how to comply with both at once.
Running an AI tool that touches personal data means two regulators are watching, not one. Here is exactly how the EU AI Act and GDPR overlap, where they diverge, and how to cut your compliance workload in half.
Read more →The EU AI Act's first hard deadlines landed in 2025, but meaningful enforcement is expected to accelerate through 2026. Here is what regulators have actually said, which sectors will face scrutiny first, and how SMEs should calibrate their compliance investment right now.
Read more →When a national AI authority sends inspectors, they don't just talk to the CEO. Your frontline employees will face questions too. Here is exactly how to prepare your team without coaching them into giving scripted answers.
Read more →Most SMEs spend weeks guessing which EU AI Act risk tier their tools fall into. This step-by-step ai risk classification self assessment walks you through 8 questions and the Annex III decision tree in under 30 minutes.
Read more →Generating synthetic data with AI tools is not a compliance-free shortcut. Here is exactly when EU AI Act obligations kick in, which articles apply, and what your organisation needs to do before your next dataset build.
Read more →If you sell AI-powered recruitment or performance management tools to EU customers, you already have obligations under the EU AI Act — and your buyers are starting to ask. Here is exactly what you need to know.
Read more →The EU AI Act isn't just a legal problem. It creates concrete engineering obligations around logging, monitoring, and AI system inventory that CIOs and CTOs at European SMEs must build into their infrastructure before the high-risk obligations apply on 2 December 2027.
Read more →Under Article 73 of the EU AI Act, deployers of high-risk AI systems must report serious incidents to national authorities within 72 hours. Here is exactly what that means for your organisation and how to do it.
Read more →Microsoft Copilot is live in thousands of European SMEs right now. Whether it triggers AI Act Article 6 high-risk classification depends on a two-part test your IT and compliance teams need to run today.
Read more →Open source AI models get special treatment under the EU AI Act, but the exemption has firm limits. Here is what deployers using Mistral, Llama, or similar models actually need to know.
Read more →If your company already runs SOC 2 or ISO 27001 audits, you're closer to EU AI Act compliance than you think. Here's how to map the overlapping controls and avoid doing the same compliance work three times.
Read more →If your Mittelstand company deploys AI in hiring, customer service, or operations, the EU AI Act creates concrete obligations that start in 2025. Here is what changes, what stays the same, and what to do next.
Read more →Every deployer of AI systems in the EU must treat compliance as a living process, not a one-time project. Here is exactly what to check, update, and document in your annual AI compliance review.
Read more →If your company is based outside the EU but deploys AI systems to European users, the EU AI Act applies to you. Here is exactly what that means and what you need to do.
Read more →The EU AI Act sets three penalty tiers reaching up to €35 million or 7% of global turnover — but the final number depends on factors most SMEs have never heard of. Here is exactly how regulators calculate what you owe.
Read more →Public bodies face some of the strictest obligations under the EU AI Act, from mandatory fundamental rights impact assessments to citizen-facing transparency rules. Here is exactly what municipal and central government deployers must do before the deadlines hit.
Read more →Under the EU AI Act, general-purpose AI providers like OpenAI, Anthropic, and Google have legal obligations to give you documentation and transparency. Here is exactly what your contracts should require.
Read more →Deploying a chatbot without checking your Article 50 obligations first is a compliance risk you can avoid in an afternoon. Here is the exact vendor due diligence checklist every European SME needs before going live.
Read more →If your company uses AI that touches personal data, you may need both a GDPR Data Protection Impact Assessment and an EU AI Act Fundamental Rights Impact Assessment. Here's exactly when each applies and how to avoid doing double the paperwork.
Read more →When a high-risk AI system makes a decision that affects someone, that person can demand a meaningful explanation. Here is exactly what Article 86 requires, who must respond, and how your HR team should handle it.
Read more →Regulators are getting specific about what bias monitoring looks like for high-risk AI systems. Here is exactly what deployers need to document, test, and report under the EU AI Act.
Read more →