Does the EU AI Act apply to non-EU companies?

Yes. If your AI system is used by people in the EU or affects people in the EU, the Act applies regardless of where your company is based.

When does the EU AI Act come into force?

The Act entered into force in August 2024. Most obligations for high-risk AI systems apply from August 2026, with some provisions (like GPAI model rules) applying sooner.

What is a 'high-risk' AI system under the Act?

High-risk systems include AI used in hiring, credit scoring, education, critical infrastructure, biometrics, and law enforcement. Most small team tools like internal chatbots are lower risk.

What should small teams do right now?

Start with an AI inventory: list every AI tool your team uses, classify its risk level, and document your data practices. That's 80% of the compliance work for most small teams.

EU AI Act

EU AI Act Compliance for Small Teams

The EU AI Act is the world's first binding AI regulation. Here's everything small teams need to understand: risk tiers, prohibited uses, obligations, and a practical compliance checklist you can start this week.

Start here

Pillar guide

EU AI Act Compliance for Small Teams: The Complete Guide (2026)

EU AI Act compliance small teams -- high-risk deadline moved to Dec 2, 2027; GPAI rules still enforce Aug 2, 2026. Classify your AI use case now.

16 min read

Related guides

Guides · 11 min

EU AI Act Conformity Assessment: What It Is and Who Must Do It

Self-assessment or notified body? Find out which EU AI Act conformity assessment path your high-risk AI system needs before December 2027.

Guides · 10 min

EU AI Act GPAI Codes of Conduct 2026: Provider Obligations and Compliance

EU AI Act GPAI codes of conduct: does signing get you Article 56 conformity? Yes, if you meet Article 53-55 duties above the 10^25 FLOPs threshold.

Guides · 10 min

Synthetic data governance and GDPR: what you need to document in 2026

Does GDPR exempt synthetic data? No, not automatically in 2026. Document re-identification risk, ROPA entry, methodology, and AB 2013 disclosure.

news · 5 min

CNIL Targets Credit Scoring AI First: EU AI Act Enforcement Is Real

CNIL sent EU AI Act documentation requests to 14 financial institutions on August 4. Three requested extensions. CNIL denied all three.

news · 5 min

Meta Skipped the EU AI Code: What Llama Deployers Must Do Now

Meta is the only major GPAI provider that refused to sign the EU AI Code of Practice. If your stack runs Llama, here is what changes after August 2, 2026.

Compliance · 11 min

EU AI Act SME support and regulatory sandboxes: what small businesses actually get

Which EU AI Act sandbox support measures actually help SMEs? Articles 57-63 cover eligibility, applications, and lighter compliance duties.

Compliance · 12 min

EU AI Act post-market monitoring: what Article 72 requires for high-risk AI systems

What must EU AI Act post-market monitoring cover? Article 72 sets the coverage, incident reporting timelines, and documentation for high-risk AI.

Compliance · 11 min

EU AI Act national competent authorities: who enforces in each EU member state

Which national competent authority enforces the EU AI Act in Germany, France, or your country? Compare powers across all 5 designated states.

Guides · 12 min

EU AI Act Article 13 transparency: what deployers must tell users of high-risk AI

What must deployers tell users under EU AI Act Article 13 transparency requirements? Disclose AI use and how to read outputs, from August 2027.

View all 51 related posts →

Frequently Asked Questions

Does the EU AI Act apply to non-EU companies?: Yes. If your AI system is used by people in the EU or affects people in the EU, the Act applies regardless of where your company is based.
When does the EU AI Act come into force?: The Act entered into force in August 2024. Most obligations for high-risk AI systems apply from August 2026, with some provisions (like GPAI model rules) applying sooner.
What is a 'high-risk' AI system under the Act?: High-risk systems include AI used in hiring, credit scoring, education, critical infrastructure, biometrics, and law enforcement. Most small team tools like internal chatbots are lower risk.
What should small teams do right now?: Start with an AI inventory: list every AI tool your team uses, classify its risk level, and document your data practices. That's 80% of the compliance work for most small teams.