Your business is in scope for the EU AI Act.
The deadline is 2 August 2026.
The EU AI Act applies to any business — anywhere in the world — with EU employees, EU customers, or EU operations. Not just EU companies. If you use AI tools that produce outputs EU users see, you have compliance obligations. Most businesses don't know this yet.
Most businesses think the EU AI Act doesn't apply to them. They're wrong.
The EU AI Act has the same extra-territorial reach as GDPR. You don't need to be based in the EU to be in scope. You need to have a connection to the EU.
If your website, product, or service is used by people in EU member states, you're in scope.
Any AI used in HR decisions, performance reviews, or hiring that affects EU-based staff triggers deployer obligations.
Supply chain obligations mean your AI practices may need to meet EU standards even in B2B contexts.
Article 50 transparency obligations apply whenever an AI system — chatbot, recommendation engine, content generator — produces outputs that EU citizens interact with.
Fines for non-compliance: up to €35 million or 7% of global annual turnover — whichever is higher.
The EU AI Act is already in force. Here's what's live.
The EU AI Act becomes law. The clock starts.
Unacceptable-risk AI systems (social scoring, certain biometric uses) are prohibited. Any business using these practices is already non-compliant.
Rules for general-purpose AI models (including ChatGPT, Copilot, Claude) are now in force. Enforcement and fines are active.
Article 50 transparency disclosures, Annex III high-risk AI obligations, and all deployer obligations (Article 26) become enforceable. This is the deadline that affects most businesses.
High-risk AI embedded in regulated products (medical devices, machinery, vehicles) comes into scope.
Using ChatGPT, Copilot, or any AI tool with EU users? You're already in scope.
Most businesses think the EU AI Act only affects AI developers. It doesn't. It affects any business that deploys or uses AI systems — which means almost every business today.
- ChatGPT or Copilot used to produce content that EU customers see
- AI chatbot or virtual assistant interacting with EU users (Article 50 disclosure required)
- AI-assisted hiring, performance review, or HR decisions involving EU employees
- AI recommendation engines showing products or content to EU customers
- AI credit scoring, insurance pricing, or financial decision-making affecting EU citizens
- Any AI system making or influencing decisions about education, housing, or legal services for EU persons
EU AI Act Compliance Packages.
Every package builds a documented compliance position for your business before the August 2026 deadline. Prices in GBP — approximate equivalents shown. Stripe accepts all major cards from any country.
~$630 · ~€580
- AI literacy policy (Article 4 compliance)
- Prohibited AI use register
- Article 50 transparency disclosures for customer-facing AI
- AI tool inventory template
- Plain-English employee guidelines
Best for: businesses using only low-risk AI tools (ChatGPT for internal notes, basic automation) with limited EU customer interaction.
Turnaround: 3–5 working days
~$1,265 · ~€1,165
- Everything in EU AI Essentials
- Risk classification of all AI tools in use
- Human oversight procedures (Article 26)
- Deployer obligations checklist
- Staff training documentation
- Basic impact assessment template
Best for: businesses with EU customers or employees who use AI in any customer-facing or operational capacity.
Turnaround: 5–7 working days
~$2,530 · ~€2,330
- Everything in EU AI Foundation
- Full Fundamental Rights Impact Assessment (FRIA)
- Incident response procedure
- Data governance documentation for AI systems
- Monitoring and logging procedures
- 12-month policy review included
- Document delivered in your language (see below)
Best for: regulated businesses, businesses using high-risk AI, or any business that wants a fully auditable compliance position.
Turnaround: 7–10 working days · Valid for 12 months
Annual reassessment available at £497 to keep pace with regulatory updates.
Ongoing Compliance
~$375 · ~€350/month
6-month minimum term, then rolling monthly with 30 days' notice.
- Your compliance framework maintained as the Act evolves
- Quarterly regulatory update reviews
- Policy updates applied as new guidance is issued
- New AI tool assessments covered
- Priority support if you receive a regulatory enquiry
Best for: businesses that want ongoing compliance without thinking about it.
Documents delivered in your language
Every document is delivered in English as standard. Need it in French, Spanish, German, Italian, Dutch, Polish, or Portuguese? Just let us know at checkout — we'll deliver your full compliance framework in your language at no extra cost.
Four steps to EU AI Act compliance.
Scope
We identify which parts of the EU AI Act apply to your business — which AI systems you use, which risk tier they fall into, and which obligations apply.
Classify
Every AI tool in use is classified — minimal risk, limited risk, or high risk. This determines your documentation and oversight obligations.
Document
We build your full compliance framework — policies, procedures, disclosures, and impact assessments — tailored to your specific tools and operations.
Certify
You receive a complete, auditable compliance pack. If you've opted for translation, your documents arrive in your language alongside the English originals.
Straight answers.
Does the EU AI Act apply to a UK or US business?
Yes — if your products, services, or AI outputs reach EU residents or employees, the Act applies to you regardless of where your business is based. This mirrors how GDPR works: it's based on where your users are, not where you are. A UK business with French customers, or a US SaaS company with German users, is in scope.
What is Article 50 and do I need to comply?
Article 50 requires you to tell people when they're interacting with an AI system — chatbots, automated content, AI-generated images, and emotion recognition tools all require disclosure. If any EU user interacts with AI on your platform, this applies from 2 August 2026.
What counts as "high-risk" AI under Annex III?
Annex III lists specific high-risk categories: AI used in employment decisions (CV screening, performance scoring), AI in education (automated student assessment), AI in financial services (credit scoring), AI in essential services (insurance, healthcare), and AI used in law enforcement or border control. If you use AI in any of these areas and your decisions affect EU citizens, you face the strictest compliance obligations.
I only use ChatGPT for internal notes — am I in scope?
If the outputs never reach EU customers or employees, and you're not making consequential decisions with it, your obligations are minimal — an AI literacy policy and a prohibited use register covers you. That's the EU AI Essentials tier. If you're using it to draft customer-facing content, emails, or support responses that EU users see, Article 50 transparency obligations apply.
What are the fines for non-compliance?
Fines vary by violation type. Using prohibited AI practices: up to €35 million or 7% of global turnover. Violations of high-risk AI obligations: up to €15 million or 3% of global turnover. Providing incorrect information to authorities: up to €7.5 million or 1% of global turnover. These are the same enforcement body and similar fine structure to GDPR.
Is this legal advice?
No. We produce compliance documentation frameworks and policy documents — we are not EU legal advisers. For businesses in regulated sectors (financial services, healthcare, legal) with high-risk AI systems, we recommend reviewing your documentation with EU-qualified legal counsel. For most SMBs using standard AI tools, our frameworks provide a solid, well-evidenced compliance position.
2 August 2026 is 4 months away.
Get compliant now.
Most businesses in scope haven't started yet. Getting your documentation in place now means you're protected before enforcement begins — and you won't be scrambling in July.
See the Packages →Or book a free 20-minute call to discuss your specific situation — scott@opsintel.io