Resources · Free guide

The EU AI Act for SMEs: what you need to do, without jargon.

If your company uses ChatGPT, Copilot or any AI tool, Regulation (EU) 2024/1689 already applies to you. This is the minimum checklist to get started.

Minimum checklist

Five steps to start complying.

  1. 01

    Inventory the AI you use

    List the AI tools each team uses (chatbots, copilots, AI features inside your software) and what for.

  2. 02

    Classify the risk of each use

    Most SME uses are minimal or limited risk. Check that none falls under prohibited practices or the high-risk uses in Annex III (for example, recruitment).

  3. 03

    Train your team (art. 4)

    Since 2 February 2025, companies using AI must ensure a sufficient level of AI literacy among their staff. Document the training.

  4. 04

    Approve an internal usage policy

    Which tools are allowed, which data must never be entered (personal, confidential) and who reviews outputs before they are used.

  5. 05

    Be transparent with clients and users

    If a client talks to a chatbot or receives AI-generated content, tell them. And review the data protection (GDPR) of each tool.

General information, not legal advice.

Get the full guide by email.

Inventory and usage-policy templates, plus examples by sector. We'll send it as soon as it's published.

Would you rather we do it with you?

The EU AI Act compliance pack for SMEs includes inventory, risk classification, usage policy, system register and a 2-hour AI literacy session.

See the pack
Free assessment · 30 min

Want to talk about your use case?

We help you find where AI delivers real returns in your company. No commitment, and a clear next step at the end of the call.

Book an assessment See pricing