Veritome blog · EU AI Act insights

EU AI Act insights and guides

Practical guidance for the people doing the compliance work. Drafted with AI assistance and reviewed before publication; general information, not legal advice.

EU AI Act Penalties and Fines: How the Tiers Actually Work

A practical breakdown of the EU AI Act's tiered maximum fines, the SME proportionality rules, and the evidence supervisory authorities are likely to ask for first.

11.08.2026 · Veritome TeamRead article →

Key takeaways

The highest EU AI Act penalty tier reaches €35 million or 7% of total worldwide annual turnover for the preceding financial year, whichever is higher, and applies to the prohibited practices in Art. 5.
Most other breaches — including high-risk obligations for providers, deployers, importers, and distributors — sit at up to €15 million or 3% of worldwide annual turnover.
Supplying incorrect, incomplete, or misleading information to notified bodies or national competent authorities is capped at up to €7.5 million or 1% of turnover.

03.08.2026Article 4 AI Literacy: The Obligation Almost Everyone Already HasArticle 4 has applied since 2 February 2025 to providers and deployers of any AI system, and a proportionate SME programme can be built and evidenced in weeks, not months.AI literacy9 min 03.08.2026Best EU AI Act Compliance Software in 2026: 12 Tools ComparedEvery claim below is drawn from vendor-published documentation, pricing pages, trust centres and company registries as they stood on that date, with sources linked inline. Where a vendor does not publicly document a capability, this guide says "not publicly documented" rather than asserting the capability is absent.Perspective15 min 26.07.2026Annex IV Technical Documentation, Explained for the People Who Write ItA section-by-section walk through Annex IV of the EU AI Act, the evidence that satisfies each part, and why continuously assembled documentation outperforms a pre-audit PDF.Documentation11 min 26.07.2026EU AI Act deadlines: the phased timeline and how to plan for itThe EU AI Act applies in stages between 2 February 2025 and 2 August 2027 — here is what falls due on each date, and what the proposed Digital Omnibus could change.Enforcement9 min 25.07.2026How to Tell If Your AI System Is High-Risk Under the EU AI ActA plain-language decision path through Annex III, the safety-component route, and the Article 6(3) exemption — so you can classify each AI system before building any compliance work on top of it.Classification9 min 25.07.2026The EU AI Act SME Checklist: What a Small Business Actually Has to DoA four-step, ordered checklist — inventory, classify, map obligations, document and monitor — showing which parts of the EU AI Act reach a typical SME and which do not.Getting started9 min 04.08.2026Best EU AI Act Compliance Software in 2026: 12 Tools ComparedAn evidence-based comparison of twelve EU AI Act tools — what each one actually produces, what it costs, and which of the Act's named documents none of them generate yet. Sources linked; our own product assessed on the same terms.Comparison19 min 04.08.2026AI Compliance Automation for the EU AI Act: A 2026 Guide for UK OrganisationsThe EU AI Act reaches UK organisations whose AI outputs are used in the Union. It is product regulation, so it asks for versioned technical evidence rather than policies. Here is what automation has to produce, what it costs, and how to tell a documentation tool from a dashboard.Operations11 min 28.01.2026The 2026 EU AI Act Shift: From One-Time Audits to Continuous Compliance2 December 2027 marks the shift to rigorous EU AI Act enforcement for high-risk systems — the date Regulation (EU) 2026/1744 (the Digital Omnibus on AI), in force since 27 July 2026, set in place of 2 August 2026. Irish businesses relying on annual audits face legal exposure. Here is what continuous compliance looks like — and how to build it.Enforcement9 min 10.02.2026The EU AI Act Regulatory Sandbox: Your Strategic Fast-Track to ComplianceThe EU AI Act Regulatory Sandbox is not a bureaucratic hurdle — it is a €0 entry ticket to regulatory pre-clearance, investor credibility, and protected real-world testing. Here is how Irish startups can use it strategically.Strategy11 min 03.03.2026How to Classify Your AI Systems Under the EU AI Act: A Practical GuideRisk classification determines every obligation your organisation faces under the EU AI Act. Get it wrong and you are either over-compliant (wasting resources) or under-compliant (facing fines). Here is how to do it correctly.Classification14 min 05.06.2026The EU AI Act High-Risk AI Checklist: Every Annex III Obligation, Step by StepIf your AI system falls under Annex III, the full high-risk regime applies from 2 December 2027 — deferred from 2 August 2026 by Regulation (EU) 2026/1744, in force since 27 July 2026. This checklist walks through every provider and deployer obligation — from the risk management system to EU database registration — so nothing slips through before enforcement.Classification12 min 06.06.2026FRIA Explained: A Step-by-Step Fundamental Rights Impact Assessment (Article 27)Certain deployers of high-risk AI must complete a Fundamental Rights Impact Assessment before first use. This guide breaks down who needs one, the six elements Article 27 requires, and how to run your first FRIA without reinventing your DPIA.Documentation10 min 10.07.2026GPAI Obligations Explained: What Providers of General-Purpose AI Models Must Do (Chapter V)If you train, fine-tune or release a general-purpose AI model, Chapter V of the EU AI Act applies to you — and it has been in force since 2 August 2025. This guide covers the baseline Article 53 duties, the open-source exemption, the systemic-risk tier, and how the Code of Practice lets you prove compliance.Classification11 min 12.07.2026Article 50: Transparency Duties and Labelling AI-Generated ContentFrom 2 August 2026, chatbots must tell people they are talking to a machine, and synthetic media must be marked as artificially generated. This guide breaks down the four Article 50 transparency duties, the editorial and artistic carve-outs, and the practical labelling steps an SME can put in place now.Documentation10 min 28.07.2026The Missing Middle: Why EU AI Act Compliance Skips Most of the EconomyThe EU AI Act scales its obligations by risk, not by headcount. A 40-person company deploying an AI hiring tool owes very nearly what a multinational owes. The compliance market, meanwhile, scaled by budget — six-figure consultancies at one end, spreadsheets at the other, and nothing in between. That gap has a name.Perspective8 min 20.07.2026The Missing Middle: Enterprise Depth, SME PriceEU AI Act compliance today comes in two flavours: free spreadsheets that leave you exposed, and six-figure enterprise GRC suites built for Fortune 500 legal teams. Between them sits everyone else — the SMEs and scale-ups who carry the same €35M fine exposure but have none of the budget. That gap is the missing middle, and closing it is the whole point of Veritome.Strategy7 min 20.07.2026EU AI Act Article 4: The AI Literacy Deadline Every Company Already PassedWhile everyone watches the high-risk deadlines, the first binding EU AI Act obligation has quietly been in force since 2 February 2025 — and it applies to almost everyone. Article 4 requires every provider and deployer of AI to ensure a sufficient level of AI literacy among their staff. There is no high-risk threshold, no exemption for small teams, and inadequate training is an aggravating factor when regulators set fines.Obligations8 min

Newsletter

EU AI Act updates, in your inbox

Deadlines, enforcement news and practical compliance guidance. One confirmation email first, then only the updates — one-click unsubscribe in every one.