Blog

News, guides and analysis on AI Act compliance

clauses contractuelles AI Actcontrat fournisseur IA obligationsdocumentation technique IA Annexe IV

AI Act Contractual Clauses: 10 Requirements to Demand from Your AI Provider

The AI Act imposes strict obligations on deployers of AI systems, which can be contractually transferred to providers. This article details the 10 essential clauses to include in your contracts with AI providers: technical documentation, incident notification, audit rights, log retention, and more. For each clause, discover why it is necessary, a sample formulation, and pitfalls to avoid. Includes a ready-to-use template to secure your AI purchases.

17 May 202616 min

AI Act RGPD comparaisonobligations croisées IA protection donnéessynergies AI Act RGPD

AI Act and GDPR: Comparative Table of Cross-Cutting Obligations

The AI Act and GDPR apply simultaneously without hierarchy. This article provides a structured comparative table of shared and specific obligations: scope, roles, risk management, transparency, data subject rights, and sanctions. Learn how to optimise compliance by avoiding redundancies and leveraging documentary synergies between the two regulations.

11 May 202610 min

IA surveillance travailAI Act interdiction émotionsArticle 5 AI Act

AI surveillance at work: what the AI Act truly prohibits from 2025

Since 2 February 2025, the AI Act has prohibited emotion inference in the workplace. Which tools are affected? What remains permitted? Analysis of the prohibitions, grey areas, and legal risks for employers, with concrete examples of market tools and their regulatory status.

6 May 20267 min

shadow AI entrepriseinventaire outils IAconformité AI Act

Shadow AI: How to inventory unauthorised AI tools in your organisation

Shadow AI, or the use of AI tools without approval by employees, exposes organisations to legal and operational risks under the AI Act. Discover why this phenomenon is growing, the concrete dangers it poses, and a 5-step method for conducting a comprehensive inventory. Includes a sample employee declaration form and ways to turn this challenge into an opportunity.

4 May 20268 min

AI Act Copilot Microsoftobligations AI Act entrepriseMicrosoft 365 Copilot conformité

Microsoft Copilot and the AI Act: What are your company's obligations?

Using Microsoft 365 Copilot exposes your business to AI Act obligations as a deployer. This article outlines risks based on usage (general productivity vs HR or credit decisions), what Microsoft covers, and what remains your responsibility: documentation, human oversight, and user training. A practical guide for French companies using Microsoft 365.

30 April 20268 min

Is your SaaS using AI without realising it? The obligations you must comply with

More and more SaaS platforms integrate AI features via third-party APIs without realising they become providers under the AI Act. Discover the concrete obligations for B2B SaaS editors: system classification, technical documentation, transparency with clients, and the business impact on tenders. A practical guide to turning compliance into a commercial advantage.

25 April 20268 min

EU AI Act: Why 'It Doesn't Apply to Us' Is the Most Dangerous Phrase for Your Business

Many SMEs believe the EU AI Act doesn't apply to them. Yet 42% of European companies already use AI-powered tools without realising it. Discover why the four most common misconceptions ('we're too small', 'we don't use AI', 'our sector isn't affected') are wrong-and how to check in 3 minutes whether your business is at risk of fines up to €15 million.

23 April 20265 min

generative ai complianceeu ai act 2026gpai obligations

Generative AI at Work: 2026 Obligations

The EU AI Act sets precise obligations for businesses using generative AI. GPAI rules in force since August 2025, mandatory transparency from November 2026: a practical guide for DPOs, CTOs and AI founders.

22 April 20269 min

ants breach ai actai age verification

19 Million Records Stolen the Day the EU Launched Its AI Age Verification: The Signal Nobody Read

On April 15, 2026, France's ANTS portal was breached. 19 million records exposed through a basic API flaw. The same day, the EU announced its AI-powered age verification solution was ready. This is not a coincidence - it is a direct warning for every organization developing or deploying AI systems that process identity data.

22 April 20267 min

AI Act Compliance: A Competitive Advantage for Your Business

AI Act compliance isn't just a regulatory burden—it's a strategic lever. Discover how to transform this obligation into a commercial differentiator, access to public markets, and reputational protection. A business analysis for leaders who view AI as an investment, not a cost.

21 April 20265 min

ai content identificationarticle 50

Your AI Images and Videos Must Be Identified by November 2026: What It Means

The AI Act imposes a concrete obligation that concerns every business using generative AI: any audio, image, video or text produced by AI and presented as real must be clearly identified as synthetic. The date set by the European Parliament under the Digital Omnibus: November 2, 2026. Here is what this means in practice.

20 April 20267 min

ai continent

AI Continent Action Plan: What Europe's €200bn AI Strategy Changes for Your Compliance

On April 9, 2026, the European Commission published the one-year progress report on its "AI Continent Action Plan": €200 billion mobilised, 19 AI factories deployed, and an official AI Act compliance assistance tool now live. This strategic plan isn't just an industrial ambition - it contains concrete measures that directly facilitate business compliance.

16 April 20268 min

1 2 3