The AI Act requires assessment of the particular use and your role in it. Being a small business or using a familiar AI product does not automatically remove obligations. This article helps with preparation; it does not assess your specific situation.
Build an inventory
Record the purpose of each application, who uses it and who is affected by its output. Note the supplier, data involved and internal owner. Include applications employees use independently.
Check current requirements
Implementation is phased. Article 50 concerning certain transparency obligations has applied since 2 August 2026. The relevant duty depends on the application and role. Consult the [European Commission guidance](https://digital-strategy.ec.europa.eu/en/faqs/transparency-obligations-under-article-50-ai-act) and current legal text when assessing your use.
Turn assessment into working arrangements
Decide what information users receive, who reviews outputs and how problems are reported. Document the arrangements and train the people involved. Assess privacy and security separately as well.
Maintain the inventory
Review arrangements when adding an application or supplier, or substantially changing its purpose. A completed checklist is not evidence of full compliance. Have uncertain cases assessed before expanding the application.
