AI & Governance

Get a handle on the AI Act.

The AI Act sets requirements for organisations that develop or use AI. We help you understand what's expected of you, which risk class applies, what you need to document and which measures you need to take. Practical, structured and immediately applicable.

Without legal maze.

Take the Frisse blik → Schedule a session

Practical and easy to understandNo legal jargon.

Immediately applicableFor organizations with 3 to 250 employees.

CurrentThe Digital Omnibus has been incorporated.

Where you stand under the AI Act

example

Mapping AI systems1812 in use · 6 in development

Risk class3high · 7 limited · 8 minimal

Policy documented3of the 3 required documents

Documentation complete68%23 of 34 components

Suppliers assessed8on AI requirements

Deadlines within 90 days2marker · annual review

Off to a good start Focus on documentation and assessing your suppliers.

No standard package.
A clear path forward
toward compliance.

What applies now, and what has been postponed

Since July 24, 2026, the Digital Omnibus is in the Official Journal. Many entrepreneurs only read the headline "AI Act postponed". That's not correct: the heaviest part is shifting, the rest simply applies.

When	What	Status
2 February 2025	Ban on certain AI practices. Requirement for AI literacy (Article 4)	applies now
2 August 2025	Rules for general-purpose AI models	applies now
2 August 2026	Transparency obligations (Article 50). Enforcement and power to impose fines	applies now
2 December 2026	Labeling AI content for systems that were already on the market before August 2026	coming soon
2 December 2027	High-risk AI, Annex III — recruitment, credit scoring, biometrics	postponed
2 August 2028	High-risk AI built into regulated products, Annex I	postponed

Delay is not an exemption. A risk classification, an AI register, and the documentation take months, not weeks. And the transparency requirement affects almost every organization that uses a chatbot or publishes AI-generated content — that deadline has already passed.

Source: Regulation (EU) 2026/1744 (Digital Omnibus on AI), published 24 July 2026, effective 27 July 2026. Checked on 14 August 2026. Read more about this in our article on the AI Act for SMEs.

Where organizations get stuck

Five things we find in almost every organization.

Unclear inventory

Not clear which systems fall under the AI ActEuropean law that sets requirements for those who develop or use AI. Determines which risk category your application falls into and what you must document for it. fall under. Often there is more AI in the business than anyone realizes.

No ownership

No one is formally responsible. It's with IT, with Legal, or with no one.

Suppliers unclear

Insufficient visibility into the risks and obligations of the parties you source AI from.

Documentation missing

The required documents are missing, out of date, or impossible to find when someone asks for them.

No usage monitoring

No visibility into how AI is being used in practice — or whether that matches what was agreed.

What we do

Seven steps, from inventory to an action list you can start with on Monday. How we set it up ourselves is described in our compliance status.

Take inventory

We map your AI systems and how they’re actually being used, including tools nobody has disclosed.

Classify

For each system, we determine its risk class under the AI Act and provide the reasoning.

Document policy

Policies, principles and control measures, written in language your team understands.

Responsibilities

We define roles: who owns it, who reviews it, who steps in.

Assess suppliers

We assess your AI vendors for risks and what they are contractually required to deliver.

Build a case file

We collect and organize the required documentation in one place.

Deliver an action list

You get a practical roadmap with priorities and an owner for each item.

From AI use to demonstrable control

The law does not require you to be perfect. The law requires that you can demonstrate that you engage with AI consciously.

1Gain insightInventory and classification of all your AI systems.

2Determine risksWhat risks are there, and which measures are necessary?

3Set up measuresPolicy, controls, oversight and documentation in practice.

4Demonstrate and monitorContinuous evidence of compliance, not a one-off report.

5Ready for the futureUp to date and prepared for audits and the 2027 deadlines.

Examples of AI use and risk classes

Most organizations are on the left and in the middle. That is good news: the obligations there are light.

Low or minimal risk

Limited risk — transparency obligation

User interactionchatbots and virtual assistants
AI-generated contentimages, text, audio, and video
Emotion recognitionproviding information is mandatory

High risk — from December onwards 2027

Recruitment and selectionCV screening, candidate scoring
Credit and insurancecreditworthiness, access to services
Critical infrastructuremedical equipment, transport, energy

Good to know

As an SME, you're almost always a user, not a provider—which significantly reduces your obligations
AI literacy has been in effect since February 2025 and is now enforceable
An AI register is not a legally prescribed form, but without an overview you can’t demonstrate anything

The fines, exactly

Up to € 35 mln or 7% of global annual revenue — only for prohibited AI practices
Up to € 15 mln or 3% — for the other obligations, including high-risk ones
Up to € 7,5 mln or 1% — for providing incorrect information

For SMEs and start-ups, the lower of the amount or the percentage applies, not the higher.

Who this works for

SMEs and growing businesses

Get compliant in a practical and affordable way, without building a compliance department.

Executive teams and management teams

Insight into risk, reputation, and legal obligations.

Compliance and legal

Support with policies, documentation, and demonstrable compliance.

Investors and due diligence

Demonstrably in control of investments and acquisitions — see also due diligence.

Turn the AI Act into clarity, action, and confidence.

Start with the free online Frisse Blik: thirteen sections, about six minutes. You’ll immediately see where you stand, including on AI and governance.

Free online scanNo obligationsConcrete action list

Take the Frisse blik →Schedule a call

Ask this site

Ask your question about AI, the AI Act, integrations or digitalization. The answer comes from the pages on this site, with references to where the information appears.

The way it works now

The appointment is in one colleague's mailbox
Data is manually retyped from one system to another
The person who knows is on vacation
No one can see afterwards why this decision was made

As it is

The agreement is stored with the client, findable for everyone
Once entered, information flows through to the rest
Work continues, even if someone is absent
Every decision has a source, an owner, and a date

drag with your finger

What if Peter leaves? Two out of five rules on this page disappear. That's how it feels when knowledge isn't part of the company.

What is your next step?

Free self-assessmentTwelve click questions, three minutes, immediate score and your biggest risk. Fresh LookBusiness case, benchmark and priority. Settled once we build after this. What it costsFixed price per package, no price per user, no hourly billing. From the fieldWhat changed at companies that started with this.

Also good to know: frequently asked questions · security and data · terms and conditions · partners · research and figures · templates · what's changing · where you start

Continue in Powerhouse

Choose the next step that fits what you are viewing now.

View AI adoption for SMEs →View AI governance →