EU AI Act for SMEs

The practical roadmap for small and medium businesses. What you need to do, when, and how to prioritize—without the legal jargon.

Start with Klarvo

Key Deadlines

1 Aug 2024

EU AI Act entered into force

2 Feb 2025

Prohibited practices + AI literacy obligations apply

Current

2 Aug 2025

GPAI + governance rules apply

2 Aug 2026

Most obligations apply (including high-risk)

2 Aug 2027

Extended transition for some Annex I high-risk AI

Your Priority Actions

Focus on these five steps to get compliant efficiently.

Build Your AI Inventory

Document every AI system you use or deploy. This is the foundation of compliance.

Get Inventory Template

Screen for Prohibited Practices

Check that none of your AI uses fall under Article 5 prohibited practices (applies now).

Run Screening Tool

Address AI Literacy

Ensure staff using AI have sufficient understanding (Article 4 applies now).

Read AI Literacy Guide

Classify Risk Levels

Determine which systems are high-risk under Annex III.

Run Risk Checker

Check Transparency Requirements

Identify Article 50 disclosure obligations for AI interactions and synthetic content.

Check Transparency

Common Mistakes to Avoid

"We don't use AI"

Many SMEs use AI without realizing it—chatbots, recommendation systems, automated screening tools. Audit your software stack carefully.

"It's the vendor's problem"

As a deployer, you have obligations too—especially for high-risk systems. You can't outsource compliance entirely to your vendor.

"We'll deal with it in 2026"

Prohibited practices and AI literacy requirements already apply. Don't wait—start your inventory and screening now.

"We need expensive lawyers"

While legal advice helps for complex cases, most SME compliance can be achieved with the right tools and templates.

Frequently Asked Questions

Does the EU AI Act apply to SMEs?

Yes. The EU AI Act applies to all organizations using or deploying AI systems in the EU, regardless of size. However, SMEs benefit from some lighter requirements and support measures.

What should SMEs do first?

Start by building an AI inventory—documenting all AI systems you use. Then screen for prohibited practices (applies now), ensure AI literacy, and classify risk levels.

What are the current deadlines?

Prohibited practices and AI literacy requirements applied from 2 February 2025. Broader obligations including high-risk requirements apply from 2 August 2026.

Do we need to hire consultants?

Not necessarily. Tools like Klarvo are designed to help SMEs achieve compliance without expensive consultants. Start with our free templates and guided workflows.