Service — EU AI Act complianceWhat applies now, and what was postponed
EU AI Act built in, not bolted on
What the EU AI Act asks of a company that uses or builds AI, as of 30 September 2026 — and the engineering that meets it: an inventory of AI uses, transparency built into the product, logging, evaluation and the documentation to show it.
Reviewed on
The facts
- In force
- Since 1 August 2024, applying in stages.
- Now
- Transparency (Article 50) since 2 August 2026. Prohibitions and AI literacy since February 2025.
- Postponed
- High-risk obligations: to 2 December 2027 (Annex III) and 2 August 2028 (Annex I).
The AI Act applies to anyone placing AI on the EU market or using it there, including companies based outside the EU whose AI output is used in it. Most businesses aren't building high-risk systems: they're deploying chatbots, assistants and automation. For them, the obligations that apply today are concrete — tell people when they're talking to an AI, mark AI-generated content, and make sure the staff using AI know what they're doing.
The Digital Omnibus approved in June 2026 postponed the high-risk obligations, but not transparency or the prohibitions. We don't give legal advice; we do the engineering part, alongside your lawyer: finding every AI use, classifying it, building the disclosures and logging into the product, measuring accuracy and writing the documentation as it's built.
Who it's for
- Companies with a customer-facing chatbot or assistant.
- Products that generate text, images, audio or video with AI.
- Businesses using AI in hiring, credit or access to essential services — potentially high-risk.
- Non-EU companies whose AI product or output reaches users in the EU.
What we do
Every AI use, found and listed. Including the ones nobody registered: the assistant in the helpdesk tool, the plugin in the CRM, the script someone wrote in marketing.
Which category each one falls into. Prohibited, high-risk, transparency obligations or minimal risk — with the reasoning written down, for your legal team to confirm.
Article 50, in the product. Clear disclosure when people interact with an AI, and machine-readable marking of generated content where the Act requires it.
Being able to show what it does. Logs of inputs and outputs, accuracy measured against control questions and monitoring for drift.
Written while it's built, not reconstructed afterwards: purpose, data, limits, human oversight and how it's tested.
Training for the people using it, which Article 4 has required since February 2025.
What you get
- The inventory of AI uses, each with its proposed classification and reasoning.
- Transparency disclosures and content marking built into the product.
- Logging, evaluation and the resulting accuracy figures.
- The technical documentation, ready for your legal team.
What people ask us
- What does the EU AI Act require right now?
- As of 30 September 2026: the prohibitions and the AI literacy duty (since 2 February 2025), obligations for general-purpose model providers (since 2 August 2025) and the Article 50 transparency obligations (since 2 August 2026) — disclosing AI interactions and marking AI-generated content.
- Was the AI Act postponed?
- Partly. The Digital Omnibus approved in June 2026 moved the high-risk obligations to 2 December 2027 for Annex III systems and 2 August 2028 for Annex I. Transparency and the prohibitions were not postponed.
- Does the AI Act apply to companies outside the EU?
- Yes, if they place AI systems on the EU market or their AI output is used in the EU. Where the company is incorporated doesn't change that.
- What are the fines?
- Up to €35 million or 7% of worldwide turnover for prohibited practices, and up to €15 million or 3% for most other obligations. For SMEs, whichever of the two amounts is lower applies.
- Do you provide legal advice?
- No. We do the engineering and documentation, and we work alongside your lawyer, who confirms the classification. Compliance is half interpretation and half implementation; we're the second half.
How it's bought
Every service follows the same path: a short diagnosis, the build with weekly deliveries and, if you want it, ongoing maintenance.
Related services
Let's talk
Tell us what you're building.