--- title: "The EU AI Act for UK SMEs: What You Actually Need to Do | Hypergility" description: "A practical guide to the EU AI Act for UK SMEs: extraterritorial scope, risk tiers, the August 2026 deadlines, and a 10-step compliance checklist." lang: en json-ld: | { "@context": "https://schema.org", "@type": "BlogPosting", "headline": "The EU AI Act for UK SMEs: What You Actually Need to Do", "description": "A practical guide to the EU AI Act for UK SMEs: extraterritorial scope, risk tiers, the August 2026 deadlines, and a 10-step compliance checklist.", "author": [ { "@type": "Person", "name": "Tuli Faas" } ], "datePublished": "2026-03-03T11:00:00+00:00", "dateModified": "2026-05-21T16:28:51.808646+00:00", "image": "https://aaiqevwzojrlzhxdxxzq.supabase.co/storage/v1/object/public/media-processed/blog-heroes/eu-ai-act-for-uk-smes-what-you-need-to-do.jpg", "keywords": "AI Safety, Build & ship", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://www.hypergility.com/blog/eu-ai-act-for-uk-smes-what-you-need-to-do" }, "publisher": { "@type": "Organization", "name": "Hypergility", "url": "https://www.hypergility.com" } } --- [![Hypergility](/assets/hypergility-logo-BKOgRT51.png)for bold startups ](/) Services [Startup Grower](https://startupgrower.hypergility.io/)[Website Build](/build-your-website)[Public Sector Bids](/offerings/win-public-sector-bids)[Management Systems & Assurance](/services/management-systems) Who it's for [Are you a bold founder?](/are-you-a-bold-founder)[Innovation Hubs](/partners/innovation-hubs)[Universities](/partners/universities)[Researchers](/personas/researchers) [Why us](/why-us)[News](/news)[Try Startup Grower](https://startupgrower.hypergility.io/)[Contact](/contact) [Back to News](/news) ![The EU AI Act for UK SMEs: What You Actually Need to Do](https://aaiqevwzojrlzhxdxxzq.supabase.co/storage/v1/object/public/media-processed/blog-heroes/eu-ai-act-for-uk-smes-what-you-need-to-do.jpg) AI Safety Build & ship # The EU AI Act for UK SMEs: What You Actually Need to Do Tuli Faas March 3, 2026 If your product uses AI and the output is consumed by anyone in the EU, the EU AI Act applies to you. It does not matter that you are a UK company, that your servers are in London, or that you have no European customers on the books today. The Act is extraterritorial in the same way GDPR is. The first enforcement deadlines have already passed; the big one for general-purpose and high-risk systems is 2 August 2026. ## The four risk tiers - Unacceptable — banned outright (social scoring, real-time biometric ID in public spaces, manipulative systems). Already in force since 2 February 2025. - High risk — strict obligations (CV screening, credit scoring, critical infrastructure, medical devices, education scoring). Full compliance by 2 August 2026. - Limited risk — transparency obligations only (chatbots, deepfakes, emotion recognition). Article 50 disclosure rules. - Minimal risk — most AI products fall here (spam filters, recommendation engines for low-stakes content). No specific obligations. ## How to work out which tier you are in Start with the use case, not the technology. A large language model used to summarise meeting notes is minimal risk. The same model used to score job applicants is high risk. The Act regulates outcomes for users, not model architectures. Map every AI feature in your product to a use case, then check Annex III for the high-risk list. ## The 10-step compliance checklist - Inventory every AI system in your product, including third-party APIs - Classify each by risk tier with a documented rationale - For limited-risk systems: add user-facing disclosure ('You are interacting with AI') - For high-risk systems: build a risk management system and document it - Implement data governance — training data lineage, bias testing, quality checks - Produce technical documentation per Annex IV (architecture, training, evaluation) - Set up logging so AI outputs can be reconstructed and audited - Define human oversight measures appropriate to the use case - Run a conformity assessment before placing the system on the EU market - Register high-risk systems in the EU database and apply CE marking ## What SMEs often get wrong **Assuming the model provider has done the work.** OpenAI, Anthropic and Google handle their own GPAI obligations. Yours start where their API ends — how you deploy, contextualise and surface the output to a user. **Treating it as a legal task.** The Act requires evidence built into your engineering and product processes: data lineage, evaluations, logging, human-in-the-loop design. Lawyers cannot retrofit this in week 50. **Ignoring the SME concessions.** The Act includes proportionality clauses for SMEs and start-ups, including simplified technical documentation and priority access to regulatory sandboxes. Use them. ## Penalties Up to €35m or 7% of global annual turnover for prohibited AI. Up to €15m or 3% for high-risk non-compliance. For an SME, the bigger commercial risk is being de-listed from enterprise procurement processes that now ask the AI Act question on the security questionnaire. Hypergility is ISO 42001 certified — the AI we build into client products is governed to the standard enterprise buyers are starting to demand. We do not sell AI Act compliance as a service. We build AI products to it. If that is what you need, talk to us. [Talk to Hypergility](/contact-us) Hypergility is ISO 42001 certified and helps clients through gap analysis and implementation. If you want to know whether the standard is right for your stage, book a call. [Talk to Hypergility](/contact-us) > “The EU AI Act is not Brussels theatre. It is the de-facto global rulebook because no one will run two product variants.” — Anu Bradford , Professor of Law, Columbia; author of The Brussels Effect 68% of UK SMEs selling into the EU were unprepared for AI Act obligations as of Q4 2024 (techUK Survey, December 2024). Trusted by clients & partners ## Clients and partners we work with [![Sussex Innovation](/trusted-logos/sussex-innovation.png)](https://www.sussexinnovation.co.uk/)[![Aqueous Digital](/trusted-logos/aqueous-digital.png)](https://www.aqueous-digital.co.uk/)[![The Growth Orchard](/trusted-logos/growth-orchard.png)](https://thegrowthorchard.co.uk/)[![GovForms](/trusted-logos/govforms.png)](https://govforms.co.uk/)[![SITA](/trusted-logos/sita.png)](https://www.sita.aero/)[![University of Sussex](/trusted-logos/university-of-sussex.png)](https://www.sussex.ac.uk/) As seen at ## Where we show up in the community [![BrightonAI Show and Tell](/trusted-logos/brightonai.png)](https://brightonai.org) Certifications ## Standards we are independently certified against [ ![ISO 9001 Badge](/assets/iso-9001-DeXtyob9.svg) ISO 9001 Quality Management ](/we-are-iso-9001-company-certified)[ ![ISO 27001 Badge](/assets/iso-27001-BiHzm-R-.svg) ISO 27001 Information Security ](/we-are-iso-27001-company-certified)[ ![ISO 42001 Badge](/assets/iso-42001-WNouqNfX.svg) ISO 42001 AI Management System ](/we-are-iso-42001-company-certified)[ Cyber Essentials UK Cyber Security ](/we-are-cyber-essentials-certified)[ Cyber Essentials Plus Independently verified ](/we-are-cyber-essentials-plus-certified) [![Hypergility](/assets/hypergility-logo-BKOgRT51.png)](/) People and our AI companion — challenging you, not just agreeing Making ideas investable For founders — we help you shape it, set it up, build it and monetise it. [Try Grower](https://startupgrower.hypergility.io/)[](https://www.linkedin.com/company/hypergility) #### Starting out Lane overviews - [Starting out](/starting-out) - [Are you a bold founder?](/are-you-a-bold-founder) - [The Startup In You](/the-startup-in-you) - [Resources in play](/resources-in-play) Stepping up - [Overview](/stepping-up) - [Researchers](/personas/researchers) - [Sales rainmakers](/personas/sales-rainmakers) - [Tech wizards](/personas/tech-wizards) - [Domain experts](/personas/domain-experts) - [Creative designers](/personas/creative-designers) - [Voluntary redundancy](/personas/voluntary-redundancy) - [Retiring, not done](/personas/retiring-not-done) No job, need a path - [Overview](/no-job-need-a-path) - [Made redundant](/personas/made-redundant) - [End of contract](/personas/end-of-contract) - [Mutually parted ways](/personas/mutually-parted-ways) - [Resigned](/personas/resigned) - [Pushed out, can't get back](/personas/pushed-out-cant-get-back) - [Overqualified / age barriers](/personas/overqualified-age-barriers) - [Returning after a break](/personas/returning-after-break) - [Retired, need income](/personas/retired-need-income) - [Never employed](/personas/never-employed) - [Grads, no offers](/personas/grads-no-offers) Fitting it in - [Overview](/fitting-it-in) - [Students / college](/personas/students) - [Side hustlers](/personas/side-hustlers) - [Work returners](/personas/work-returners) - [Career changers](/personas/career-changers) - [Family duties](/personas/family-duties) - [Health / disability barriers](/personas/health-disability-barriers) - [Post-prison](/personas/post-prison) - [Underrepresented founders](/personas/underrepresented-founders) #### Resources in play Lane overviews - [Resources](/resources) - [Roadmap](/roadmap) - [News & insights](/news) Short runway - [Overview](/short-runway) - [Cash crunch](/personas/cash-crunch) - [Turnaround / restructure](/personas/turnaround) - [Distressed](/personas/distressed) - [Preserve, or pivot](/personas/preserve-or-pivot) Resourced and reloading - [Overview](/resourced-and-reloading) - [Successful exiters](/personas/successful-exiters) - [Go-again success seekers](/personas/go-again) - [Post-raise reset](/personas/post-raise-reset) - [Pre-series A](/personas/pre-series-a) - [Grant-funded R&D](/personas/grant-funded-rd) - [Money inheritors](/personas/money-inheritors) Struggling with investors - [Overview](/struggling-with-investors) - [Pitch isn't landing](/personas/pitch-not-landing) - [Wrong room, wrong investors](/personas/wrong-room) - [Term-sheet stalled](/personas/term-sheet-stalled) - [Bridge or down-round](/personas/bridge-or-down-round) - [Post-rejection reset](/personas/post-rejection-reset) #### Startup Grower - [Grower overview](/grower) - [Validate](https://idea.hypergility.io/) - [Pitch](/grower/pitch) - [First customer](/grower/first-customer) - [Brand site](/grower/brand-site) - [Open Grower app](https://startupgrower.hypergility.io/) - [Website Build](/build-your-website) - [Public Sector BidsLater ](/offerings/win-public-sector-bids) - [All offerings](/pricing) - [Pricing](/pricing) - [Roadmap](/roadmap) #### Capabilities - [AI safety](/ai-safety) - [R&D claims](/rnd-claims) - [Smarter IP](/smarter-ip) - [Trust & certifications](/trust) #### Company - [Privacy](/privacy-policy) - [Cookies](/cookie-policy) - [Terms](/terms-of-use) - [Use policy](/use-policy) - [ICO registration](/ico-registration) - [AI ethics](/ai-ethics) - [IP statement](/ip-statement) - [Image attribution](/image-attribution) #### Company - [Home](/) - [What we do](/what-we-do) - [Why us](/why-us) - [Contact](/contact) - [News](/news) - [Roadmap](/roadmap) - [Sitemap](/sitemap) - [llms.txt](/llms.txt) - [Trust & certifications](/trust) #### How we work [ Do it yourself Self-serve with Grower ](/do-it-yourself)[ Do it with you Coaching & expert sprints ](/do-it-with-you)[ Do it for you Done-for-you delivery ](/do-it-for-you)[ Do it with a partner Vetted specialist network ](/do-it-with-a-partner) #### Offerings Tap any card for the dedicated page. Status shown on each. Launch sequence — earliest to latest Live shipping today — buy or book now › Next in build, launching soon › Later scheduled, design stage › On radar validated demand, no date yet [Shape](/shape) Pressure-test the idea - [Is my idea any good?Live ](/offerings/is-my-idea-any-good) - [Bootstrap your runwayLive ](/offerings/bootstrap-your-runway) - [Validate fastLive ](/offerings/validate-fast) - [Size the prizeNext ](/offerings/size-the-prize) - [Competitor intelligenceNext ](/offerings/competitor-intelligence) - [Nail the pitchLive ](/offerings/nail-the-pitch) [Set-up](/set-up) Get the foundations right - [Incorporate & structureLive ](/offerings/incorporate-and-structure) - [Cap table & equityNext ](/offerings/cap-table-and-equity) - [Tax-efficient share schemesOn radar ](/offerings/tax-efficient-share-schemes) - [Claim R&D creditsLive ](/offerings/claim-randd-credits) - [SEIS/EIS advance assuranceLater ](/offerings/seis-eis-advance-assurance) - [Signal EquityNext ](/offerings/signal-equity) [Build](/build) Ship what customers want - [Ship the productLater ](/offerings/ship-the-product) - [Get found onlineNext ](/offerings/get-found-online) - [Win grants & innovation loansLater ](/offerings/win-grants-and-innovation-loans) [Monetise](/monetise) Turn traction into revenue - [Win first customersNext ](/offerings/win-first-customers) - [Pricing & business modelNext ](/offerings/pricing-and-business-model) - [Buyer-ready sales decksNext ](/offerings/buyer-ready-sales-decks) - [Activate IP for partnershipsLive ](/offerings/activate-ip-for-partnerships) - [Win public sector bidsLater ](/offerings/win-public-sector-bids) - [C-suite distribution networkOn radar ](/offerings/c-suite-distribution-network) #### Partner network Advisors & Professionals - [Accountants & advisors](/partners/accountants) - [Lawyers & legal advisors](/partners/lawyers) - [Agencies & consultants](/partners/agencies-and-consultants) - [Independent consultants](/for-consultants) Capital & Community - [Investors, angels & syndicates](/partners/investors) - [Founder communities & networks](/partners/communities) - [Trade associations](/partners/trade-associations) Innovation & Education - [Universities & TTOs](/partners/universities) - [Innovation hubs & incubators](/partners/innovation-hubs) - [Accelerators](/partners/accelerators) - [Tech & integration partners](/partners/tech-and-integration-partners) Workforce Transitions - [Outplacement agencies](/for-outplacement-agencies) - [HR & redundancy teams](/for-employers-redundancy) #### Registered Hypergility Hypergility Ltd & Hypergility Innovations Ltd [help@hypergility.com](mailto:help@hypergility.com) Trading address Science Park Square Brighton BN1 9SB Registered office 66 Paul Street London England EC2A 4NA #### Independently certified [![ISO 9001](/assets/iso-9001-DeXtyob9.svg)ISO 9001 ](/we-are-iso-9001-company-certified "ISO 9001")[![ISO 27001](/assets/iso-27001-BiHzm-R-.svg)ISO 27001 ](/we-are-iso-27001-company-certified "ISO 27001")[![ISO 42001](/assets/iso-42001-WNouqNfX.svg)ISO 42001 ](/we-are-iso-42001-company-certified "ISO 42001")[CE Cyber Essentials ](/we-are-cyber-essentials-certified "Cyber Essentials")[CE+ Cyber Essentials Plus ](/we-are-cyber-essentials-plus-certified "Cyber Essentials Plus") © 2016 - 2026 Hypergility Ltd. All rights reserved. © 2024 - 2026 Hypergility Innovations Ltd. All rights reserved. We use cookies to improve your experience and analyse site traffic. You can manage your preferences or read our [Privacy Policy](/privacy-policy). Accept AllReject Non-EssentialManage Preferences