Skip to content
Book a meeting Flash Diagnostic
Control · AI Act · law as at 10 October 2026

The AI Act in plain English, for your SME

Comply with the AI Act, and prove it to your clients.

Hello, has my order been shipped?

You are interacting with an AI

Yes, it was shipped this morning. Would you like the tracking link?

The visual for your new offerAI-generated content
Obligations01

What changes for an SME

Mainly transparency, competent teams and caution.

  • Inform

    The people you deal with, when they are interacting with an AI.

  • Flag

    Content generated by an AI.

  • Build skills

    In your teams, on the tools they use.

  • Keep a person in charge

    For screening job applications or assessing your employees.

  • Know the prohibited practices

    So as not to stray into them unknowingly.

The real trigger: a client

For most SMEs, the question will not come from an inspection, but from a main contractor asking, in a call for tenders or a questionnaire, for guarantees on your uses of AI. Penalties exist, and for an SME the lower of the two ceilings provided for applies; but what matters is being able to answer your clients.

In short02

What already applies, and what is coming

In stages; law as at 10 October 2026, reviewed every six months.

  1. In forceSince February 2025

    Prohibited practices and AI literacy

    such as social scoring or emotion recognition in the workplace; and training your teams, with no level to guarantee

  2. In forceSince 2 August 2026

    Transparency

    telling people they are interacting with an AI, and flagging generated content

  3. Coming2 December 2026

    Marking of content

    technical marking, for systems already on the market

  4. Coming2 December 2027

    High-risk systems

    including those used for recruitment (a deadline postponed by a regulation of July 2026)

Sources: Regulation (EU) 2024/1689 on artificial intelligence (official text); Regulation (EU) 2026/1744, which rewrites its Article 4 (AI literacy) and postpones some of its deadlines.

Our role03

Our role, alongside your lawyer

What we do

  • In everything we deliver that interacts with people, the notice “you are interacting with an AI” is built in by default.
  • The AI Usage Audit takes stock of your uses, identifies the gaps, proposes a correction plan and gives you a reusable file of evidence for your clients.
  • Every irreversible action waits for a person’s approval. Who decides what

What we do not do

  • No legal assessment.
  • No certificate of compliance.
  • No opinion on a risk of penalty.
  • That is for your data protection officer or your lawyer, and we will point you towards them.
Free · no commitment

Knowing where you stand, and being able to show it.

Not sure whether the AI Usage Audit or another offer suits you? The Flash Diagnostic points you in the right direction in two minutes.

  1. 2 minthe Flash Diagnostic, online
  2. 1 hthe Scoping Meeting, free
  3. 72 hyour written report
FAQ04

Your questions

Does the AI Act apply to us, even if we only use ChatGPT?

Yes, as soon as your teams use an AI tool, ChatGPT included. The European AI regulation (the AI Act) mainly asks three things of an SME:

  • competence: measures so that everyone masters AI in proportion to their use, with no level to guarantee;
  • transparency: the people you deal with know when they are interacting with an AI, and the generated content you publish is flagged;
  • caution: no screening of job applications or assessment of employees left to a tool alone, and no prohibited practice.

For most SMEs, the question will first come from a client asking for guarantees, not from an inspection.

Will our customers know they are interacting with an AI?

Yes. Since 2 August 2026, the European AI regulation has required people to be told when they are interacting with an AI, on your website, on the phone or by email. In everything we deliver that interacts with people, this notice is built in by default. It is also a matter of trust: a customer who finds out afterwards feels deceived.

Do we need to train our teams in AI?

Yes, everyone in proportion to their use: since February 2025, the European AI regulation has required measures so that your teams master AI. Since July 2026, it is a best-efforts obligation: no specific level has to be guaranteed for any individual. For a specific agent, the onboarding session with its users contributes to this; it is included with the Process Agent, Business Agents and the Company Brain. For broad use of off-the-shelf tools, an AI use charter and awareness-raising for your teams are useful: the AI Usage Audit gives you this charter. The AI Assistant Setup includes it too, with one onboarding session per team on the tool and the assistants set up: it is not general AI training.

When does the AI Act apply?

In stages, from 2025 to 2027 (law as at 10 October 2026):

  • since February 2025: the prohibited practices, and measures so that your teams master AI, with no level to guarantee;
  • since 2 August 2025: the obligations of providers of general-purpose AI models (the vendors, not the users);
  • since 2 August 2026: transparency, that is, telling people they are interacting with an AI and flagging generated content;
  • 2 December 2026: the technical marking of content, for systems already on the market;
  • 2 December 2027: high-risk systems, including those used for recruitment.
What do we risk if we do not comply with the AI Act?

Penalties, with high ceilings; for an SME, the lower of the two ceilings provided for applies. For most companies, the concrete risk will first come from a client: not being able to answer when they ask for guarantees on your uses of AI. To assess a risk of penalty, we point you towards your data protection officer or your lawyer.

Is AI-assisted recruitment prohibited?

No, but it is tightly regulated. Systems used for recruitment are classified as high-risk by the European AI regulation, with stricter obligations from 2 December 2027. Never leave the screening of applications or the assessment of your employees to a tool alone: a person must decide. That is why, as things stand, we do not offer application screening; an agent can, however, acknowledge receipt of applications.

Which AI practices does the AI Act prohibit?

Since February 2025, the European AI regulation (the AI Act) has prohibited certain practices, with no possible exception: for example social scoring of people, emotion recognition in the workplace, or biometric categorisation of people by sensitive characteristics. For an SME, the point is to know them, so as not to stray into them unknowingly.

They are not the same as high-risk uses, such as sorting job applications or assessing employees, which are allowed but regulated. Synergetik builds none of them: they are among what we refuse to automate. Whether a specific use falls under them is a legal assessment, which belongs to your data protection officer or lawyer.

Another question? Write to us

Flash Diagnostic 2 min, free

Scoping Meeting

In 1 hour, find out what to hand over to AI and what you stand to gain; a written report within 72 hours.

Calendar provided by Google Calendar. Our privacy policy