EU AI Act for Startups & SMEs: What You Actually Need to Do
There is no small-company exemption from the EU AI Act — a two-person startup shipping a high-risk AI feature has the same core obligations as a large vendor. But the Act does build in proportionate measures for SMEs and start-ups, and knowing where to focus keeps compliance from swallowing a small team.
The Act applies — but proportionately
Obligations attach to what your AI system does, not to your headcount. If your system is high-risk under Annex III, the Chapter III requirements apply regardless of company size. What changes for SMEs is how some duties are met, not whether they apply.
Relief available to SMEs and start-ups
The Act includes specific measures for smaller providers (notably Article 62 and related provisions):
- Simplified technical documentation. Microenterprises and small companies can use a simplified form for the Annex IV technical file.
- Priority access to regulatory sandboxes. SMEs and start-ups get priority for the AI regulatory sandboxes national authorities must set up, letting them test under supervision.
- Reduced conformity-assessment fees. Fees are to be set proportionately to company size and market share.
- Proportionate fines. For SMEs and start-ups, penalty ceilings are applied as the lower of the percentage-of-turnover and fixed-amount caps.
Where a small team should focus first
- Classify honestly. Most startup AI is limited- or minimal-risk — don't assume the heavy obligations apply until you've checked. Run the free checker.
- Nail transparency. If you have a chatbot or generative feature, Article 50 notices are cheap to add and commonly missed.
- Do AI literacy. Article 4 applies to everyone and is largely a training + policy exercise.
- Only then, high-risk. If you genuinely have a high-risk system, prioritise risk management, data governance and technical documentation — and use the SME simplifications.
Frequently asked questions
Are startups exempt from the EU AI Act?
No. There's no small-company exemption — obligations depend on what the AI system does, not company size. But the Act provides proportionate measures for SMEs: simplified documentation, sandbox priority, reduced fees and proportionate fines.
What's the cheapest way for an SME to comply?
Classify your systems first — most startup AI is limited- or minimal-risk, where duties are light (mainly Art. 50 transparency and Art. 4 AI literacy). Reserve the heavy, costly work for genuinely high-risk systems, and use the SME simplifications when you do.
Free, no sign-up. Deterministic — not a chatbot.
Still have questions about how this applies to you? Talk to us — we're happy to help.