The EU AI Act: What UK SMEs Actually Need to Know

The EU AI Act comes into full effect on August 2, 2026. If you're a UK-based SME, you might think this doesn't apply to you. You'd probably be wrong.

If your business sells products or services to EU customers, uses AI tools developed in the EU, or deploys AI systems that affect people in the EU, the Act applies. And the fines for non-compliance are significant: up to 7% of global turnover or €35 million, whichever is higher.

That said, most of the panic around the EU AI Act is overblown. For the average SME, compliance is straightforward once you understand what's actually required.

Who Does It Apply To?

The Act defines four roles, and your obligations depend on which ones apply to your business:

Provider: You develop or commission an AI system and put it on the market. If you've built a custom AI tool, this is you.
Deployer: You use an AI system in your business operations. If you use ChatGPT, Copilot, or any AI tool in your workflow, this is you.
Importer: You bring an AI system into the EU market from outside the EU.
Distributor: You make an AI system available on the EU market without modifying it.

Most SMEs fall into the Deployer category. You use AI tools, you don't build them. This is the lightest compliance burden.

The Risk Classification System

The Act classifies AI systems into four risk levels:

Unacceptable Risk (Banned)

Social scoring, real-time biometric surveillance in public spaces, AI that manipulates people's behaviour. If you're an SME, you're almost certainly not doing any of this.

High Risk

AI used in recruitment, credit scoring, critical infrastructure, education assessment, and law enforcement. This is where most of the compliance requirements sit. If you use AI to screen CVs or assess loan applications, pay attention.

Limited Risk

Chatbots, deepfake generators, emotion recognition. The main requirement is transparency - you must tell users they're interacting with AI, not a human.

Minimal Risk

Spam filters, recommendation engines, AI-powered search. No specific requirements under the Act.

What Most SMEs Actually Need to Do

If you're a typical SME using off-the-shelf AI tools (which most are), your obligations are relatively simple:

Inventory your AI systems. Know what AI tools your business uses. This sounds obvious but most businesses can't answer this question. Our free AI Inventory tool at compliance.polynym.co can help with this.
Classify the risk level. For each AI system, determine which risk category it falls into. Most will be Minimal or Limited Risk.
Ensure transparency. If you use a chatbot on your website or AI-generated content in customer communications, disclose it.
Document your usage. Keep records of what AI systems you use, what they're used for, and any risk assessments you've conducted.
Check your suppliers. If you use high-risk AI systems, ensure your provider is compliant and can supply the necessary documentation.

What You Don't Need to Worry About

You don't need to hire a compliance officer for this.
You don't need to conduct a full technical audit of every AI tool you use.
You don't need to stop using AI while you figure this out.
You don't need to spend £50,000 on a Big Four consultancy to tell you what you already know.

The August 2026 Deadline

The key date is August 2, 2026. By this date, high-risk AI system requirements are fully enforceable. The transparency obligations for limited-risk systems are already in effect.

The smart move is to start now rather than scramble in July. An afternoon spent inventorying your AI tools and classifying their risk level will put you ahead of most businesses.

Need Help?

We've built a set of free compliance tools at compliance.polynym.co that walk you through the entire process step by step. No signup required, no sales pitch. Start with the AI Inventory tool and work through from there.

If you need hands-on help with compliance for high-risk systems, we offer a structured compliance service starting from the Discovery phase. Book a free 15-minute call to discuss your specific situation.