Compliance Guides
Step-by-step guidance for meeting EU AI Act requirements.
EU AI Act Article 4: The AI Literacy Rule Is Already Live
Most companies think the EU AI Act has not started yet. They are wrong. Article 4's AI literacy duty has applied since 2 February 2025, and it survived the proposed deadline delays. Here is what it means and how to find out where you stand with a free 90-second risk check.
Do You Have to Register Your AI System in the EU Database?
Most AI systems never touch the EU database. High-risk ones generally do, and the provider usually has to register before the system goes live. Here is who registers, what gets logged, and when. Start with the free 90-second risk check to find out if you are even in scope.
Does Using ChatGPT at Work Make You Liable Under the EU AI Act?
Using ChatGPT, Copilot, Gemini or Claude at work usually makes you a deployer under the EU AI Act, not a provider. That carries real but mostly light duties, and they get heavier fast for certain uses like screening job applicants. Our free 90-second risk check tells you which side you land on.
Do I Need EU AI Act Compliance for My AI Chatbot?
Almost every AI chatbot owes EU AI Act transparency duties, and some quietly count as high-risk. Here is what your chatbot triggers under Article 50 and Annex III, who carries the disclosure when you build on GPT or Claude, and how to find out in 90 seconds.
Does the EU AI Act Apply to Companies Outside the EU?
If your AI reaches people in the EU, the EU AI Act reaches you, wherever you are based. Here is how the extraterritorial scope works, the 'output used in the EU' test that catches non-EU teams, and the EU representative some providers must appoint.
Fine-Tuning GPT or Claude: Your EU AI Act Obligations
Fine-tuning a frontier model does not hand your EU AI Act obligations to OpenAI or Anthropic. It can add them. Here is when fine-tuning makes you a provider, and what you owe once it does.
Is Your AI System High-Risk Under the EU AI Act?
The high-risk tier is where the EU AI Act's heavy obligations live. Here is how to tell if your AI lands there: the Annex III list, the Article 6(3) exemption almost nobody mentions, and the profiling rule that overrides it.
Provider vs Deployer Under the EU AI Act: Which Are You?
Your EU AI Act obligations hinge on one word: are you a provider or a deployer? Here is how to tell them apart, why many small companies are both, and the quiet modification that turns a deployer into a provider overnight.
Do Small Companies Have to Comply With the EU AI Act?
The EU AI Act is risk-based, not size-based, so 'we are too small' exempts no one. Here is what actually applies to small companies and start-ups, the relief the Act grants SMEs, and how to find your obligations in 90 seconds.
EU AI Act Compliance Checklist for 2026
A complete EU AI Act compliance checklist covering risk classification, documentation requirements, and key deadlines for 2026. Actionable steps for every organisation deploying AI in the EU.
Building an EU AI Act Compliance Team: Roles and Responsibilities
A practical guide to structuring an EU AI Act compliance team, including key roles, reporting lines, skills requirements, and phased approaches for SMEs and enterprises.
EU AI Act: Frequently Asked Questions Answered
Answers to the most common questions about the EU AI Act, from who it applies to and how risk levels work, to fines, GPAI obligations, and what documentation you actually need.
EU AI Act Prohibited AI Practices: Is Your System at Risk?
A detailed analysis of the eight categories of prohibited AI practices under Article 5 of the EU AI Act. Learn what's banned, why, and how to audit your AI systems to ensure they don't cross the line.
EU AI Act vs GDPR: Key Differences and Overlaps
A side-by-side comparison of the EU AI Act and GDPR, covering scope, obligations, enforcement, penalties, and how to build a unified compliance framework.