I will classify your ai systems under the eu ai act
I build and run the systems behind SME's
About this Gig
Most businesses using AI have no list of where they are using it. The chatbot counts. So does the CV screening tool someone in HR signed up for, and the lead scoring nobody calls AI.
The EU AI Act applies if you place an AI system on the EU market or use one in the EU, which reaches most Irish and UK businesses selling into Europe. Obligations arrive on a staged timetable rather than all at once, and the first ones have already passed.
The work is a register and a classification. Every system you run, named, with its purpose, its risk tier, and what that tier actually obliges you to do. Most SME systems land in limited or minimal risk, where the obligation is disclosure rather than an engineering programme. Getting the tier wrong in either direction costs you: too high and you build controls you never needed, too low and the record does not defend you.
This is a compliance record, not legal advice, and I am not a solicitor. If your situation needs a legal opinion I will tell you that instead of selling you a document.
What I need is a list of the software you use, including anything with AI features you did not go looking for.
Field of law:
Privacy
Target country:
Other
Document type:
Disclaimer
•
GDPR
•
Terms of service
•
Privacy policy
Legal consulting Gigs are not screened
Please note that there is no screening process for this service. We recommend that you message the freelancer and check all necessary details before placing your order. Pro freelancers in this category have gone through a vetting process. You can find more details here.
My Portfolio
FAQ
Does this apply to me if I am in the UK?
The Act applies by market rather than by where you are established. If you sell into the EU, or your system is used there, it reaches you. The UK has no equivalent statute yet, so many UK businesses are in scope only through their EU customers.
We only use ChatGPT. Do we need this?
Possibly not, and I will say so. If everything you run is minimal risk the deliverable is a short register recording exactly that, which is still worth having the first time a customer's procurement questionnaire asks what AI you use.
Is this legal advice?
No. It is a compliance record: what you run, how it classifies, and what that classification obliges. A solicitor gives the legal opinion. This is the document they would otherwise charge you to assemble before they could give one.
What if you find something high risk?
I tell you immediately, before the rest of the work, because the obligations are substantial and you may want a solicitor rather than me. High risk is rare in an SME and usually turns up in hiring or credit decisions. Sometimes the cheapest fix is switching a feature off, which takes it out of scope

