The EU AI Act (Regulation EU 2024/1689) is the first comprehensive legal framework for artificial intelligence. For an Italian SME the question is not whether it applies, but which AI systems fall under the obligations and by when.

The deadlines that matter

  • 2 February 2025 — bans on unacceptable-risk systems and the AI literacy obligation (Art. 4) for staff who use AI systems.
  • 2 August 2025 — rules for general-purpose AI models apply.
  • 2 August 2026 — full application of high-risk system obligations and the start of oversight.

The minimum checklist for an SME

  1. Inventory: list every AI system in use, in-house or third-party.
  2. Risk classification: prohibited, high, limited or minimal.
  3. Literacy: train whoever uses AI (already mandatory).
  4. Documentation and human oversight for high-risk systems.

The cheapest way to get ready is to start from a gap assessment: know where you stand against the Regulation before spending the first euro.

Where to start

An independent audit turns regulatory uncertainty into a plan with priorities, owners and dates — the first step toward AI that is compliant, safe and defensible.