The AI Act regulation provides measures dedicated to SMEs, such as reduced fees and priority access to regulatory sandboxes. This checklist details the 10 major actions to be carried out in 2026, from AI inventory to FRIA, with responsible parties, deadlines, and reference articles.
Discover the 10 essential actions for SME AI Act compliance in 2026, including priorities, deadlines, and specific obligations for each step.
Step 1: Inventory all AI systems in use
Before taking any action, it is essential to identify all artificial intelligence tools present in the company, including those used informally.
Shadow AI is a critical issue for SMEs: nearly 40% of AI systems in companies are not officially declared. Creating this inventory helps target systems subject to the AI Act and avoid omissions.
Also include AI features integrated into business software (CRM, recruitment, chatbots, etc.).
Responsible: CIO, Compliance Officer, or Management
Estimated duration: 2 to 4 hours
References: Art. 3(1) (definition of AI system), Art. 50 (transparency)
Create a table listing the tool name, provider, usage, data processed, and internal users. This document will serve as the foundation for the next steps.