Compliance guides and practical explainers

The EU AI Act applies to small businesses too — but the obligations depend on what AI you use and how. This guide cuts through the noise and explains what an SMB actually needs to do.

The EU AI Act and GDPR are separate regulations with different scopes. GDPR compliance does not mean AI Act compliance. This guide explains what you need for each.

The EU AI Act's Annex III lists 8 categories of high-risk AI systems. This guide explains each category with real examples, covers the Article 6(3) exception, and explains what high-risk classification means for your company.

The EU AI Act sets fines up to €35 million or 7% of global turnover. But deployer violations carry much lower caps. Here's what your company actually risks.

A practical checklist of what the EU AI Act requires, organised by obligation type and deadline. Covers Article 4, high-risk systems, transparency requirements, and the August 2026 deadline.

ChatGPT, Copilot, Claude, Gemini: if your company uses any of these, you have EU AI Act obligations. Most are light. Here is exactly what you need.

Article 4 of the EU AI Act requires every company deploying AI to maintain an AI literacy policy. This guide explains exactly what it must contain and who it applies to.

2 August 2026 is the main compliance deadline for most EU AI Act deployer obligations. This article explains what needs to be in place, what was already due in 2025, and what comes after.

If your company uses an AI-powered applicant tracking system, you are almost certainly a high-risk AI deployer under the EU AI Act. Here's what that means and what to do about it.

The EU AI Act splits obligations between providers (who build AI) and deployers (who use it). Most companies are deployers. Here's what that means for your compliance workload.