The AI Act is now in force: what small businesses need to have in order

Since August 2 2026, the general obligations of the European AI Act apply to almost every business that uses AI, even if you do not build AI yourself but only use tools built by others. The deadline has now passed. Time to look at what this actually requires from a small business.

Who this applies to

Most business owners are what the law calls a deployer, not a developer. That matters: the heavy regime for high risk systems does not apply if you use a chatbot, a writing assistant or an automation tool built by someone else. But deployers now also face a basic set of obligations.

What needs to be in place now

Four things come up again and again: an overview of which AI tools are used within the business and for what, a short internal policy on how AI is handled, demonstrable knowledge among the people working with AI, and transparency toward customers whenever AI communicates with them. For a business with two AI tools, that is an afternoon of work. For a business that has added AI tool by tool over the years without anyone keeping track, the first step is simply mapping out what is actually running.

Why this is manageable once the basics are in order

Research shows that a large share of business owners barely know what is changing. That sounds worrying, but the practical impact for most small businesses is limited: no licensing process, no heavy audit, just a short, honest overview of what runs and why. Businesses that already use AI deliberately and with structure, rather than as a loose collection of bolted on tools, are usually mostly there already.

The real work is in the overview

The obligation itself is not the hard part. Building the overview often is, especially at businesses where AI features have been bolted onto different systems over time: a chatbot here, a text generator there, a leftover AI subscription nobody uses anymore. That is a good moment to check whether those features still work together, or whether they have quietly become separate islands that each need their own upkeep.