Are there small-business exemptions under the AI Act?

Business size alone does not exempt you from the AI Act. Support, simplification and different penalty ceilings exist, each with conditions. Establish your role, AI use and enterprise category before checking the particular provision.

What support does Article 62 provide?

Measures include priority sandbox access for SMEs with an EU registered office or branch that meet eligibility and selection conditions, targeted training and enquiry channels. Conformity-assessment fees take account of provider size and other indicators.

Priority does not mean unconditional admission or free implementation. Check the programme, criteria and work for which you seek support. If you are not a provider needing that assessment, fee relief does not create a new duty to buy one.

What does Article 63 simplify?

Following Regulation (EU) 2026/1744, SMEs, including start-ups, without partner or linked enterprises may meet certain quality-management-system elements in a simplified manner. This is conditional relief for particular work, not a general exemption for every small firm.

The level of protection and need to meet high-risk requirements remain. A shorter format does not permit skipping risk management or checking results. Establish which elements can be simplified under applicable rules rather than relabelling a missing document “simplified”.

How size affects fine ceilings

The penalty categories differ:

For prohibited practices, the general ceiling is EUR 35 million or 7% of total worldwide annual turnover for the preceding financial year, whichever is higher.
For specified other breaches, the ceiling is EUR 15 million or 3% of that turnover, whichever is higher.
For incorrect, incomplete or misleading information supplied in response to a request, the ceiling is EUR 7.5 million or 1%, whichever is higher.

For SMEs, including start-ups, the lower value applies in these categories. For the separate small mid-cap category, SMCs, the amendment introduces the lower value only for the latter two categories, not prohibited practices. These are ceilings, not amounts automatically due in a case.

What size does not decide for you

Check the actual use: prohibited practice, transparency duty or high-risk case. A small team does not change the system’s intended purpose. Equally, do not assume every business has every duty of a high-risk-system provider.

Use the applicable European definition and enterprise-relationship rules when determining category. SME and SMC are not interchangeable labels. Do not assess status only from the people in one office or an informal description of the firm as small.

What to check nationally

Check current powers and national rules for the activity. A customer’s contractual request does not replace checking your own statutory duties either.

Prepare a register of tools, uses and business roles. Separate the relief sought from the duty it eases. You can then ask an authority or lawyer a concrete question without assuming size settles everything.

Questions

Are we automatically exempt below a headcount threshold?

Not on that basis alone. Check the conditions of the particular duty and relief. Enterprise classification is not general permission for every AI use.

Does small size guarantee a lower actual fine?

The actual penalty cannot be calculated from its ceiling alone. The breach, category and circumstances matter. The lower-value rule limits the maximum; it is not a decision on your case in advance.

What does EU AI Act Readiness provide?

An operational register and map of uses, applicable duties and relevant relief. Questions needing a legal conclusion are flagged separately. The service is not a legal opinion or certificate.

Sources

Find out which relief actually applies and which duties remain.

EU AI Act Readiness records the AI you use and the Article 62 and 63 measures relevant to your case, while separating questions for legal assessment.

Ask about EU AI Act Readiness

or write to contact@ergostrat.com