Skip to content
COMPLIANCE

On August 2, 2026, the EU AI Act takes full effect.

I already build compliant. You don't need to wade through legal articles, I've built it into every project I deliver.

The AI Act is now fully in effect, here's how I keep you compliant.

Schedule a call

What is the AI Act, exactly?

The European Union created a law that regulates how businesses can use AI. It's called the EU AI Act and it's been in place since August 1, 2024. It's being activated in phases.

Chatbots and AI assistants that talk to customers must clearly disclose they're AI from August 2, 2026 onwards. Businesses using AI need to know which AI they use and what for.

No ban on AI. No stop sign for SMEs. Just rules of the game, so people know what they're dealing with.

When does what take effect?

  1. February 2, 2025
    Prohibited AI + AI literacy for employees
    Already in effect
  2. August 2, 2025
    Rules for large AI models
    Already in effect
  3. August 2, 2026
    Chatbot transparency + high-risk obligations
    The deadline
  4. August 2, 2027
    Remaining provisions
    Coming up

What does this mean for your business?

Good news: for most SMEs, the impact is smaller than you think. The law defines 4 risk categories. You'll almost always fall into one of the bottom two.

  • Prohibited

    Social scoring, manipulative AI

    Not relevant

  • High risk

    HR selection, credit scoring, critical infrastructure

    To avoid, Socialo deliberately doesn't build this

  • YOUR BUSINESS

    Limited risk

    Chatbots, virtual assistants, customer service AI

    You're probably here

  • Minimal risk

    Invoice OCR, spam filters, internal analytics

    No obligations

In 'limited risk', only two rules apply: (1) your chatbot must clearly state it's AI, and (2) you need to be able to show which AI you use and why. Both easy to arrange, I do it by default.

What I do by default, without you having to think about it

  1. AI disclosure in every chatbot

    Every chatbot I build starts with a clear message: 'You're talking to an AI assistant.' No confusion, no quasi-human names. Compliant with Article 50 of the AI Act.

  2. Always a path to a human

    My chatbots always have an escape: 'Prefer to speak with a team member?' One click. Legally required from August, already my standard.

  3. Compliance dossier at delivery

    With every project you receive a dossier covering: which AI I deployed, what for, what data flows through it, who's responsible, and how human oversight is arranged. Exactly what the law requires from you as a 'deployer'.

  4. Data processing agreement included

    When I build AI that works with your customer data, you automatically receive a data processing agreement. No extra costs, no lawyer needed, just properly handled.

  5. EU hosting where possible

    Data stays in Europe by preference. No unnecessary detours via American servers. Where an EU option exists, I choose it.

What about the GDPR?

The AI Act comes on top of the GDPR, not instead of it. For every AI project that processes personal data, I look at three things:

  • DPIA check

    A DPIA is an upfront check on privacy risks. For every new project, I assess whether one is needed. When in doubt, I do it, it costs me a few hours, you nothing.

  • Processing register

    The data protection authority expects you to track which personal data you process and why. My documentation aligns with this requirement one-to-one.

  • Enforcement

    The data protection authority lists AI as one of their three enforcement priorities for 2026–2028. The chance of inspections is increasing. Documentation is the best defense.

What I can't do for you

  • AI literacy in your team

    The law has required since February 2025 that employees understand what AI is and can do. An hour of training is usually enough. I can provide it, but you need to organize it.

  • Your own AI inventory

    ChatGPT accounts that employees use on their own ('shadow AI') also fall under the law. I'll help you map out what's being used in your business.

  • Formal AI policy

    A short document that records how you use AI. I provide a template; you sign it.

  • Final legal judgment

    I'm a builder, not a lawyer. In edge cases, I refer you to an attorney specializing in AI law.

Frequently asked questions

Yes. The law makes no exception for company size. However, the regulator takes a proportional approach: obligations and enforcement are based on the risk of the system, not the revenue of the business. For most SME automation (limited/minimal risk), the requirements are modest.

Prefer to have it built by someone who gets it?

The deadline is set. The sooner you start, the smoother you'll get through it. A free scan shows you where you stand and what needs to happen, including on the compliance front.

Schedule a call

This page is informational and does not constitute legal advice. For questions specific to your situation, consult an AI law specialist.