EU AI Act Compliance Support

Regulation (EU) 2024/1689, also known as the EU AI Act, marks the world’s first comprehensive legal regime for artificial intelligence. In force since August 2024, it applies to any organisation using AI in Europe, regardless of size or sector. As with GDPR, NIS2 and DORA, failing to prepare in time exposes organisations to serious legal, reputational and financial risks.

Eurotux helps organisations achieve EU AI Act compliance with practical, efficient support that minimises unnecessary complexity.

What is the EU AI Act?

The EU AI Act classifies AI systems into four risk levels — prohibited, high, limited and minimal — and sets out specific obligations for each. For most SMEs, the main focus is on requirements affecting users (deployers) of minimal or limited risk systems:

  • Art. 4 — AI literacy: ensuring employees have the skills to use AI responsibly (already in force)
  • Art. 5 — Prohibited practices: identifying and avoiding banned AI uses (e.g. subliminal manipulation, social scoring, mass biometric surveillance)
  • Art. 6 — Risk classification: assessing whether systems fall under high-risk categories (Annex III)
  • Art. 26 — Inventory and accountability: maintaining a register of AI systems and appointing an internal AI governance lead
  • AI governance: introducing an approval process before adopting new AI tools

Why does the EU AI Act matter?

The EU AI Act is already taking effect. AI literacy requirements are in effect, and other deadlines are fast approaching (by August 2026). Organisations that fail to comply risk:

  • Fines of up to €35 million or 7% of global annual turnover
  • Reputational damage with customers, partners and investors
  • Exclusion from EU funding processes that require proof of compliance
  • Potential civil liability for misuse of AI systems

Organisations that act early gain an edge by showing responsible AI use and earning stakeholder trust.

Who does the EU AI Act apply to?

The regulation applies to any organisation using AI systems in Europe. If your company uses:

  • Generative AI tools (e.g. ChatGPT, Microsoft Copilot, Google Gemini, Claude)
  • Customer service or internal chatbots
  • AI-powered automation systems
  • Predictive analytics, recruitment, or process management tools with AI elements

— then the EU AI Act applies to you. For most SMEs, compliance is practical with documentation, training, and governance. This is the core of our service for small and medium enterprises.

The Eurotux service: AI Act Essentials

AI Act Essentials is a consulting package for SMEs covering the core requirements of EU AI Act compliance for low- and limited-risk AI systems. Delivery is completed in 3–4 working days, with all outputs finalised within 20 working days from kick-off.
 
This is an operational and technical service. It does not include legal advice or representation.

The six deliverables

  • E1 — AI systems inventory: A structured register of all AI tools used across the organisation — who uses them, for what purpose, and what data they process (Art. 26)
  • E2 — Risk classification: Each system is classified under the EU AI Act framework (prohibited / high / limited / minimal), with clear documented justification (Art. 5, Art. 6, Annex III)
  • E3 — Internal AI usage policy: A tailored policy covering approved tools, restricted data, human oversight rules, and the appointed internal AI lead (Art. 26, Art. 4)
  • E4 — AI literacy session: A 45–60 minute training session (remote or in person), including attendance tracking and covered topics — ensuring compliance with Art. 4
  • E5 — Compliance record: A concise document compiling evidence such as training details, participant list, approved policy, and designated responsible person (Art. 26)
  • E6 — AI governance procedure: A clear process for evaluating and approving new AI tools, including decision criteria and approval tracking (Art. 26)

What’s included — and what isn’t

At Eurotux, transparency comes first. This service is designed for organisations using low- and limited-risk AI systems, the typical SME scenario. It does not include:

  • Legal advice or legal representation
  • Compliance assessments for high-risk AI systems (Annex III), which require notified bodies
  • Development, modification, or technical auditing of AI systems
  • Ongoing regulatory monitoring

Important note: If the risk assessment (E2) identifies high-risk systems in use, we will flag this immediately and recommend an appropriate follow-on service.

Why Eurotux?

With over 25 years of experience, Eurotux supports organisations in adopting technology responsibly. We have been recognised multiple times as an SME Leader and SME Excellence company, hold ISO 9001 (since 2015) and ISO 27001 (since 2022) certifications, and are a trusted partner in regulatory compliance, including NIS2 and DORA.

  • Proven compliance expertise: Supporting organisations through NIS2 and DORA — with the EU AI Act as the natural next step

  • Results-driven approach: Six clear deliverables, delivered in weeks, not months, without unnecessary complexity

  • Strong information security: NDA in place before delivery, all data treated as confidential, and securely deleted afterwards

  • Long-term partnership: We don’t just deliver a report; we stay with you as regulations evolve and provide ongoing support

Get started — Talk to us

Get in touch with our team to learn more about AI Act Essentials or request a tailored proposal for your organisation.

Contact Services - Page Detail
*
Este site é protegido pelo reCAPTCHA e aplicam-se a Política de Privacidade e os Termos de Serviço da Google.

Livre-se de preocupações!

Abrace a transformação digital com a Eurotux.

Switch The Language