If you answer "yes" to any of these questions, the EU AI Act likely applies to your business:
1. Do you use any AI-powered tools or software? (e.g., ChatGPT, Copilot, automated analytics) 2. Do you have customers, employees, or users in the EU? 3. Do you sell products or services in the EU market? 4. Do you use AI for hiring, customer profiling, or automated decision-making?
Most modern businesses use AI in some form — even basic tools like spam filters, chatbots, and recommendation engines may qualify.
**If you BUILD AI systems** (or commission custom AI development), you are a **Provider**. Providers face the highest compliance burden, including technical documentation, conformity assessments, and post-market monitoring.
**If you USE AI systems** built by others (which is most SMBs), you are a **Deployer**. Deployers have lighter obligations, but still must: - Ensure AI systems are used according to instructions - Maintain human oversight of high-risk AI - Keep logs where required - Inform affected individuals about AI use - Train employees on AI literacy (Article 4)
Many SMBs are deployers — you use AI tools built by others (like Microsoft, Google, OpenAI) in your daily operations.
You might not realize how much AI your business already uses:
- **Customer Service**: Chatbots, automated ticket routing, sentiment analysis - **HR & Hiring**: Resume screening, automated candidate ranking - **Marketing**: Personalization engines, ad targeting, content generation - **Finance**: Fraud detection, credit scoring, expense categorization - **Operations**: Demand forecasting, quality control, scheduling optimization - **Communication**: Email drafting (Copilot), translation, transcription
Each of these may have different compliance requirements depending on their risk level.
If you are unsure whether your AI use falls under the regulation, it is better to assess now than to wait. The enforcement deadlines are approaching fast, and non-compliance penalties can reach EUR 35 million or 7% of global turnover.
AktAI's free compliance scanner can analyze your AI tools and tell you exactly where you stand in under 5 minutes.
What is the most common role for SMBs under the AI Act?