The EU AI Act: The Complete Guide for Small Teams

The EU AI Act has over twenty separate guides on this site. Each guide covers one article, deadline, or obligation. That depth is useful once you know what you are looking for, but it is a poor starting point. This page is the starting point. It shows what applies to you, in what order, with a direct link to the full guide on each piece.

Source note: every date and obligation below comes from the individual guides linked in this post. Each guide cites official EU Parliament or European Commission material. The 2026 Digital Omnibus simplification package shifted some dates. This guide reflects the current confirmed timeline. Check the lastmod date on each linked guide before you rely on it for a compliance deadline.

Start here: does the AI Act apply to you at all?

First, confirm that you build or deploy an “AI system” under the Act’s legal definition. Many automation tools and simple software rules do not qualify.

• EU AI Act AI System Definition: The Official 7-Element Test — run your tool through the test before you check any obligation below.

The two obligations already in force

These obligations apply now, regardless of company size. The 2026 delay package did not affect them.

• Prohibited practices (Article 5), in force since 2 February 2025. This is a short, fixed list of banned AI uses. It includes workplace emotion recognition, certain biometric categorization, and dark-pattern manipulation. See EU AI Act Article 5: AI Practices You’re Banned From Using.

  The prohibitions became legally binding on 2 February 2025. The enforcement infrastructure takes effect from 2 August 2026. This infrastructure includes national competent authorities and penalty mechanisms. The ban applies regardless of this date. What changes on 2 August 2026 is who can formally penalize a breach.

• AI-literacy duties (Article 4), in force since 2 February 2025. This covers your staff, freelancers, and contractors who use AI tools. It covers people, not just tools. See EU AI Act Article 4: What Creator Agencies and Small Teams Owe.

If you build on top of someone else’s AI model or tool

Agencies and small teams can fine-tune, rebrand, or substantially modify a third-party AI tool. If you do this, you can unintentionally inherit legal obligations meant for the original developer.

• EU AI Act Article 25: When You Become the AI ‘Provider’ — this explains how legal responsibility can shift from the tool’s original maker to you.
• GPAI Code of Practice: Provider vs. Deployer, Explained — the general-purpose-AI-model obligations, in force since 2 August 2025.

If you publish AI-generated content

• How to add AI disclosures that comply with the EU AI Act — the Article 50(4) content-disclosure duty.
• The EU AI Act: Everything Digital Creators Need to Know — the creator-specific summary.

Watermarking obligations on AI-generated content are a separate, provider-facing duty. This duty differs from the disclosure requirement above. See the deadlines timeline for the distinction and the current date it applies from.

If you use AI for hiring or other high-risk purposes

• EU AI Act High-Risk Hiring AI: The Annex III Test — whether your hiring tool counts as high-risk, and what that triggers.
• How to Build an EU AI Act AI System Register (Free Template) — the record-keeping obligation that applies once you are classified.

What the 2026 delay package actually changed

The original 2 August 2026 deadline for most high-risk obligations no longer applies. The European Parliament’s 2026 simplification package pushed several dates back. In some cases, the delay exceeds one year.

• EU AI Act Deadlines 2026–2028: The Current Timeline — the full, officially sourced date-by-date breakdown.
• The AI Act Omnibus Delay: Relief or a Trap for Small Teams? — why “the deadline moved” does not mean “you can wait.”

Support small teams can actually claim

The Act includes real, underused support for SMEs and start-ups. It does not include only obligations.

• EU AI Act Article 62: Free Support SMEs Can Claim — priority regulatory sandbox access, free training, reduced conformity-assessment fees.

The condensed version

If you read only one more page after this one, read the checklist:

• EU AI Act Checklist for Small Business: 6 Articles That Matter — the six articles that actually apply to most small teams, in order.
• EU AI Act Compliance Starter Kit: 5 Steps for Small Teams — a 5-step action sequence: scope, prohibited-use check, risk classification, transparency duties, records.

Where the edges are still unsettled

Not every question the AI Act raises has a clean answer yet, even for regulators.

• Recommender Systems: Even EU Regulators Don’t Agree Which Law Applies — where the AI Act and the Digital Services Act overlap without a clear resolution.
• Regulation as a Feature: The Case for AI Transparency — the argument to treat these obligations as a differentiator, not just a cost.

The AI Act’s small-team obligations come down to five questions, in order. Does the definition apply to you? Are any of your uses prohibited outright? Did you become a “provider” without knowing it? Do your public AI outputs need a disclosure? Does anything you do count as high-risk?

Every guide above answers one of those five questions. Start with the system definition test first. Then work down the list that applies to you.

Browse all Perspectives or get in touch →