AI policy
Does my company need an AI policy?
Two-thirds of employees use AI tools their employer never approved. Here's why nearly every SME needs an AI policy.
Right-sized AI governance and EU AI Act compliance for companies that don't need a heavy program.
Meet your obligations under the EU AI Act and help your company use AI responsibly without the cost and complexity of an enterprise governance framework.
AI Act compliance for SMEs
- Built by EU privacy and AI-regulation specialists with years of hands-on practice
- Proportionate and risk-based, no over-engineered policies or processes
- Practical outputs you can actually use
The AI Act applies to you too, not only to tech giants.
Most small and medium companies already use AI daily, and now carry real obligations under the EU AI Act. But full governance programs are built for large organisations. You need something proportionate and risk based.
Obligations you may be missing
Article 4 of the AI Act requires AI literacy for staff who use AI systems. Many companies don't know it applies to them.
No time to build from scratch
Researching the law, writing policy and training your team is months of work you don't have the time or people for.
Protecting the company's interests
Staff paste sensitive data into AI tools every day. Without clear rules, that's a real risk to your business.
As an SME that only uses AI, you have fewer obligations than you think.
If your company only uses AI tools (like ChatGPT, Claude or Copilot) rather than building or selling them, much of the AI Act simply doesn't apply, but a few things do.
What you probably don't have to do
- –No complex testing or documentation requirement. Those obligations fall on providers of high-risk AI systems, not on companies that merely use AI tools.
- –No dedicated compliance department or full management system. A proportionate set of rules and records, combined with some training for employees, is enough for most SMEs.
- –Most everyday business use isn't "high-risk". General productivity tools (drafting, summarising, coding help) generally fall outside the AI Act's high-risk categories. However, if your company uses AI, for example, to evaluate candidates in hiring, more obligations may apply, so understanding the basics is essential.
What usually does apply
- +AI literacy requirement for employees that use AI
(Article 4). - +Transparency when AI interacts with people or generates content
(Article 50).
“The goal isn't more rules. It's the smallest set that actually protects your business, and proves you took AI seriously.”
The EthiCode approach
Compliance that fits your size, in three steps.
We start with a free conversation and recommend only what you need, which is often less than you'd expect.
- 1
Free discovery call
A 20–30 minute call to understand how your company uses AI and what the AI Act actually requires of you.
- 2
Right-sized recommendation
You get a clear scope (training, documentation or a tailored solution) with transparent pricing.
- 3
Delivery & evidence
Live training, ready-to-use policies and records that show regulators and partners you take AI seriously.
Transparent pricing. Start where you need to.
Every engagement begins with a free discovery call. Prices below are starting points. The final quote depends on your team size and scope.
AI Literacy Training
For teams in order to meet the Article 4 obligation
from €500
net, + VAT
- Live 2-hour online session
- Tailored to how your team uses AI
- Slides + attendance record
Training + Documentation
For SMEs that want compliance evidence in place
from €1,200
net, + VAT
- Everything in the training tier
- AI use policy for your company
- Staff guidance + records templates
Tailored Solution
For higher-risk use cases, AI developers or bespoke needs
Custom quote
scoped per engagement
- Assessment of your specific risk profile
- Bespoke policies & controls
- Ongoing advisory as you grow
A downloadable self-service package with explanations and templates is coming soon.
Not sure what you need?
Start with a free 20–30 minute call. No obligation and no sales pitch. You'll come away knowing where you stand. Or try our free AI Act self-assessment first.
“Good governance is the smallest set of rules that actually protects your business.”
Legal-grade expertise, without the enterprise price tag and complexity.
We've spent years advising businesses of every size, from SMEs to multinationals, on legal, privacy and AI governance topics. We use that experience to turn requirements into practical steps an SME can follow and benefit from.
EthiCode supports the companies most exposed to the new AI rules and least equipped to handle them, with practical and ready-to-apply advice. You don't have a compliance department, but you still carry the obligations.
We've advised a range of SMEs across tech, professional services, retail and e-commerce, so we know the AI Act rarely looks the same in two companies, and we scope accordingly. We help you understand your actual risks and how to mitigate them.
Every solution is grounded in current EU law and translated into plain, usable steps. No jargon, no fear-selling and no templates you'll never open. Only what protects your company and your team.
Plain-language guidance on the AI Act
Short, practical reads on what the EU AI Act means for smaller companies, and what to do about it.
AI literacy
AI literacy: the AI Act duty that already applies
Article 4 AI literacy already applies to almost every company using AI. A legal duty, but also a competitive advantage.
AI governance
Why your company should govern AI use
Beyond legal compliance: how governing AI use protects your data, knowledge, IP and budget.
Send an inquiry
Tell us a little about your company and where you are with AI. We'll reply within three business days and, where useful, suggest a free discovery call.
[email protected]
Budapest, Hungary