SME guide

AI Act for SMEs: where should you start?

The AI Act is the European regulation for artificial intelligence systems. For an SME, the first practical step is not a complex legal file: it is knowing which AI tools are used, for which purposes, and with which initial risk level.

Why SMEs are concerned

Even companies that do not build AI already use AI through ChatGPT, Copilot, Notion AI, HR tools, support software or business applications.

The first deliverable: an AI inventory

Before policy or full audit, a clear inventory lists tools, domains, declared usage, teams, risk levels and review status.

What to avoid

Do not start with a heavy process that asks everyone to manually report everything. Start with a simple, verifiable, minimal inventory.

Starting checklist

Use this as a starting point before involving legal or compliance specialists.

  • List known AI tools.
  • Identify visited domains.
  • Ask real business usage.
  • Spot HR, credit, education, health or access-to-service use cases.
  • Export a first readable evidence base.

FAQ

Does the AI Act concern SMEs using ChatGPT?

Potentially yes. Exact obligations depend on your role, the system and the use case. The inventory remains a useful starting point.

Do I need a lawyer to start?

Not to start the inventory. Legal support is useful for sensitive or high-risk use cases.

Does AIMapper replace legal analysis?

No. AIMapper helps structure inventory and operational evidence.

See what AIMapper produces

Explore a sample report, then join the beta to build your first AI inventory.