Many very small businesses and mid-sized companies have already deployed artificial intelligence tools—ChatGPT, Copilot, predictive CRM systems, HR tools, and more. However, they generally haven’t assessed their risk level with regard to the AI Act. This is to be expected, since the implementation timeline extends through August 2027. This regulatory change does, however, call for swift action, as achieving AI Act compliance within a company takes several months. Good news for executives, CIOs, and CISOs: there’s still time to act! Elit-Technologies conducts various security audits and tests—the first step toward compliance and cybersecurity.
What is the AI Act, and who is affected by it?
Ce nouveau texte européen (règlement UE 2024/1689) est le premier cadre juridique de l’intelligence artificielle au niveau mondial. Entré en vigueur le 1er août 2024, il classe les systèmes d’IA selon quatre niveaux de risque, avec une application échelonnée. Toute entreprise utilisant l’IA en Europe est concernée au minimum par l’obligation de maîtrise et de formation déjà imposée.
Voici les quatre niveaux de risque de l’IA Act.
| Niveau de risque | Exemples d’usages |
|---|---|
| Inacceptable | Notation sociale, manipulation comportementaleUsages interdits |
| Haut risque | Recrutement, crédit, éducation, biométrieObligations renforcées |
| Limité | Chatbots, contenus générésObligation d’information |
| Minimal | Usages courantsSans contrainte spécifique |
AI Act Requirements That Are Already in Effect or Have Been Postponed: What Exactly Is the Situation?
Some deadlines are already in effect:
The high-risk timeline has just changed. At the end of June 2026, the European Parliament and the Council of the EU approved, via the “Digital Omnibus,” its postponement to December 2, 2027 (Annex III), and to 2028 for AI integrated into regulated products. This text is currently being published in the Official Journal: the timeline therefore remains to be confirmed, but the path forward is clear.
Organizations would be well advised to view this timeframe as an opportunity to prepare for compliance with the AI Act without rushing.
Where should you start to bring your business into compliance with the AI Act?
Like any cybersecurity initiative, regulatory compliance always begins with an audit. In this specific case, it involves mapping your AI systems and assessing their risk level.
Elit-Technologies offers a dedicated AI-readiness audit that assesses your organization’s AI maturity and guides you toward a tailored action plan. This step is all the more important given that the potential penalties are significant:
Please note: The AI Act does not replace the GDPR! Both regulations apply whenever AI processes personal data.
Need some clarity on the cybersecurity regulatory framework? The experts at Elit-Technologies are here to help.
Why choose Elit-Technologies for your AI Act compliance?
Our experts in information system protection, cyber incident response, and regulatory monitoring have been supporting businesses for over 19 years. Elit-Technologies is familiar with each client’s specific situation: information systems, security, collaboration tools, and more. Their compliance efforts are therefore based on a well-documented reality, not on a generic, detached audit. Elit-Technologies complements this support with training and consulting services to transform regulatory requirements into the controlled use of AI within the enterprise.
Elit-Technologies also offers ELiA, its in-house, sovereign AI platform dedicated to AI governance from an IT department perspective, as well as business-specific AI solutions. An example? A sales assistant that speeds up the drafting of prospecting emails. Our goal goes beyond compliance: we support the productive and responsible use of AI, backed by ISO 27001 certification and the Expert Cyber label. Discover Elit-Technologies’ AI and ELiA offerings.
Request an AI-readiness audit, assess your high-risk AI uses, or speak directly with an Elit-Technologies expert. Your compliance journey starts today!
Frequently Asked Questions
I use ChatGPT or Copilot at my company: Does the AI Act apply to me?
Yes. As soon as an artificial intelligence tool is used in a professional setting, the organization is subject, at a minimum, to the obligation to ensure control over the AI and to provide training on its use. The extent of these obligations then depends on how these tools are actually used.
What is a high-risk AI system?
These are artificial intelligence solutions used in areas that are sensitive in terms of fundamental rights: recruitment, credit assessment, education, biometrics, critical infrastructure management, and so on. These systems are subject to stricter requirements regarding documentation, human oversight, and traceability.
What are the risks to my company if it does not comply with the AI Act?
Penalties can reach 35 million euros or 7 percent of global revenue, depending on the severity of the violation. The most stringent requirements for high-risk systems are still expected to take effect on December 2, 2027, but several requirements are already in effect today.
Where should you start to ensure compliance with the AI Act?
An audit of your AI usage is the first step before any action plan. It involves mapping the AI systems in use and assessing their risk level. This is the purpose of the AI-readiness audit offered by Elit-Technologies.