Next deadline
T−17 days
· Main application
Policy intelligence desk · English · EU + British Isles
How Europe is adopting AI — without the slogans.
Flint Brief reads the EU AI Act article by article, prices SME adoption work in euros, and names the advisors worth talking to.
Status board
EU AI Act, at a glance.
In force since
Art. 4 literacy · Art. 5 prohibited practices
Penalty cap
€35M · 7%
Of worldwide turnover for prohibited practices · Art. 99
Briefings live
57 editions
Last verified
Regulatory watch
EU AI Act — implementation timeline
-
In force
Prohibited practices (Art. 5) and AI literacy obligation (Art. 4).
-
In force
General-purpose AI rules and governance bodies operational.
-
Main application
High-risk systems (Annex III) and transparency duties (Art. 50).
-
Grandfathered
High-risk systems already on the market must come into compliance.
Source: Regulation (EU) 2024/1689 — EUR-Lex.
Latest dispatch
Synthetic health data: who should EU SMEs choose?
A new EU clinical-data challenge turns synthetic data into a buying test. We compare Syntho, MDClone, Tonic.ai and ARCKONE.
Recent briefings
More from the desk.
All editions
Police AI needs a disclosure run log
UK police will pilot AI for evidence review. The missing control is a run log that lets investigators, prosecutors and defence reconstruct each result.
Anonymous data now needs a three-test file
New EDPB guidance turns anonymisation into an evidence task: test record isolation, linkage and inference before treating data as outside GDPR.
Online age checks: who should EU SMEs choose?
The EU child-safety report turns age assurance into a product decision. Compare the EU blueprint, Yoti, Verifymy and ARCKONE.
EU identity wallet: who should SMEs choose for integration?
EUDI wallets arrive by end-2026. Compare ARCKONE, Signicat, IDnow and Okta for one usable identity workflow.
ENISA's CRA score needs an evidence backlog
ENISA has given SMEs a practical cyber maturity model. The useful result is not the score but an owned backlog of product-security evidence.
Meta's DSA case is a risk-file lesson, not a feature ban
The Commission's preliminary case against Facebook and Instagram targets an inadequate systemic-risk file, not one interface pattern in isolation.
The web is not a free AI training set
The EDPB's new draft on web scraping gives EU SMEs a practical test for any generative-AI dataset built from public pages.
The EU cyber-AI plan needs an SME asset list
Brussels' new cyber-AI plan is not a buying list. EU SMEs should first map the systems, data and privileges an AI-assisted attack can reach.
The Apply AI Startup Award is a nomination test
Europe's new Apply AI Startup Award is not an open call. Founders first need a credible national route, sector fit and a concise proof file.
Agricultural AI: who should EU SMEs choose for a field trial?
The EU's first Apply AI agriculture dialogue is a prompt to buy one useful data path, not a generic farm-AI promise.
AI cyber evaluations: who should EU SMEs choose?
The EU's 7 July AI cybersecurity plan turns model risk into a buying question for SMEs using advanced AI.
AI energy now needs a meter, not a slogan
The EU is moving AI energy measurement from sustainability claim to procurement evidence. SMEs should ask vendors for usable numbers.
AI Act Omnibus: who should EU SMEs call first?
After the Council's AI Act simplification vote, SMEs need triage: public help, governance software, counsel or a build partner.
The UK automated-decision file SMEs now need
The UK Data Use and Access Act is now in force. SMEs using AI decisions need a small evidence file before they need a governance programme.
SBOMs are becoming the SME supplier file
ENISA's 2026 SBOM survey turns software bills of materials from security paperwork into a supplier-readiness test for EU SMEs.
Forced labour checks: who should EU SMEs choose?
The EU Forced Labour portal turns supplier traceability into a concrete evidence job for SMEs before December 2027.
Cyber skills need a role map, not a course list
The new EU Cybersecurity Skills Coalition helps SMEs only if the training choice starts with named operational roles.
Training-data summaries: who should EU SMEs choose?
The AI Act's GPAI training-content summary turns model selection into a procurement evidence problem for EU SMEs.
CRA reporting needs a product incident desk
ENISA's SME survey turns the Cyber Resilience Act from a legal deadline into a reporting workflow problem.
AI Factories need a compute brief, not a wish list
Europe's AI Factories are opening free SME access, but the useful application starts with a small workload file.
AI sandbox help: who should EU SMEs choose?
AI Act sandboxes are becoming operational work. SMEs should choose help by evidence, workflow and role, not by the sandbox label.
AI content icons are a workflow problem for SMEs
The EU's AI-generated content icons give SMEs a visible label, but the real work is deciding when a label belongs in the workflow.
The non-high-risk AI file SMEs now need
The Commission's draft Article 6 guidelines turn a small AI Act exception into a documentation job for SME providers.
AI agent logs: who should EU SMEs choose?
Agentic AI turns logging into a buying decision: platform traces, gateway records, security review or workflow implementation.
The AI Act Advisory Forum is an SME signal, not a shortcut
The AI Act Advisory Forum has started work. SMEs should use it as an early-warning feed, not a substitute for their own AI inventory.
External AI evaluators enter the SME supplier file
The AI Office is formalising external model evaluation. SMEs should turn that into sharper supplier questions, not a new audit theatre.
AI Act help desks do not replace an SME evidence log
The Commission now offers more AI Act guidance, but SMEs still need a small evidence log before tools become business process.
Health AI now needs evidence, not pilots
The Commission's June 2026 health AI survey is a warning for SMEs: adoption now depends on evidence, data access and workflow proof.
CRA help for EU SMEs: who should own product security?
ENISA's SME CRA survey turns product security into a buying question: legal advice, tooling, assessment body or workflow builder?
Data Union help: who should EU SMEs choose?
The EU wants more AI-ready data. SMEs should choose help by workflow, not by platform label.
AI agents need an SME job description
The OECD's 2026 SME AI survey shows why agents need a bounded task, not a vague autonomy mandate.
Quantum security is now a procurement issue
The EuroQCI consultation closes on 24 June. SMEs do not need quantum kit yet, but they do need crypto migration evidence.
EU open source strategy: the SME test
The EU's June 2026 open source strategy gives SMEs a practical procurement test: less lock-in only matters when the software can be run.
Digital Omnibus help: who should EU SMEs choose?
The AI Act delay changes the advisory brief: EU SMEs now need a legal tracker, governance record and build evidence, not a slogan.
AI Act delay: what EU SMEs should still do in 2026
The AI Omnibus shifts high-risk AI timing, but SMEs still need inventories, Article 50 checks and evidence before August 2026.
EUROPA is a model promise, not an SME plan
The EU chose EUROPA to build a 24-language open frontier AI model. SMEs should treat it as a signal, not procurement certainty.
The AI Act calendar is now evidence work
The Commission's 2026 guidance queue gives SMEs a practical AI Act task: document systems before legal deadlines become procurement pressure.
Digital Decade 2026: the AI gap is now operational
The EU's 2026 Digital Decade report shows AI adoption rising, but SMEs still need process, data and skills before tools become capacity.
EU AI support maze: EDIH, AI Factory or build partner?
Europe's Apply AI push gives SMEs more routes into AI adoption. The hard part is choosing public support, model vendors or workflow builders.
AI content labels: who should EU SMEs choose in 2026
The EU's 2026 code turns AI content labelling into a procurement choice: C2PA tooling, model vendors, legal advice or workflow implementation.
G7 cyber warning puts AI security on the SME agenda
The G7 cybersecurity declaration turns AI security into a supplier-evidence problem for SMEs buying or building AI systems in Europe.
AI Act sandboxes move to 2027. SMEs should still watch
The Omnibus deal gives Member States one more year to open AI Act sandboxes. For SMEs, the useful work starts before the doors open.
High-risk AI Act help: lawyer, platform or build partner?
The Commission's draft high-risk AI guidance turns AI Act scoping into a buying decision for EU SMEs: legal review, governance software or implementation help.
CADA for EU SMEs: cloud, hyperscaler or build partner?
The EU's Cloud and AI Development Act turns sovereignty into a buying question. SMEs need to compare European clouds, hyperscalers, AI factories and build partners.
AI literacy for EU SMEs: course, lawyer or build partner?
Article 4 is already live, with supervision from 3 August 2026. A practical comparison of AI literacy routes for EU SMEs.
AI Act help for EU SMEs: governance platform or build partner?
Weeks before the 2 August 2026 cliff, an 'AI Act compliance' market has appeared. Which governance platform, advisor or build partner fits which EU SME.
AI Act transparency: what EU SMEs must label by August 2026
Most of the AI Act's Article 50 transparency duties still apply on 2 August 2026. What EU SMEs must disclose on chatbots, deepfakes and AI content, and what moved.
AI Act enforcement is no longer theoretical
The Commission's new Scientific Panel and Advisory Forum do not create new SME duties, but they make AI Act interpretation and surveillance more concrete.
UK-EU AI divergence in 2026: the cost for cross-Channel SMEs
The EU has provisionally delayed its high-risk AI rules to 2027. Britain still has no AI Act. What the widening gap means for SMEs trading across the Channel.
EU AI buying is becoming an audit-trail problem
For European SMEs, the next AI bottleneck is not model access. It is procurement discipline, evidence, and operating accountability.
EU AI adoption in 2026 is a two-speed market for SMEs
Eurostat's 2025 data shows strong growth in AI usage, but adoption remains sharply unequal by company size, country, and digital maturity.
Cohere absorbs Aleph Alpha: what sovereign AI means for EU SMEs
A Canadian firm buys Europe's second-largest LLM player. Examining what 'sovereign AI' actually delivers for EU SMEs picking an LLM in 2026.
EU AI Act for SMEs: the August 2026 cliff edge
Most EU AI Act obligations enter application on 2 August 2026. What EU SMEs must do, what waits till 2027, and what most can ignore.
The EU AI talent crunch in 2026: where SMEs can still find people
57% of EU firms can't find qualified tech staff. Practical paths for SMEs to source AI capability without competing on scale-up salaries.
Honest AI advisors for EU SMEs: who actually helps in 2026
Curated map of AI consultancies that genuinely serve European SMEs in 2026. Named names, real strengths and limits — publisher included, with disclosure.
Why most EU AI strategy frameworks did not survive 2026
Dozens of 2024-2025 'AI Transformation' frameworks are now retired or rewritten. What killed them, and which survived into 2026.
Coverage
Four beats. One desk.
Regulation
The EU AI Act, read line by line.
Articles 4, 6, 50 and Annex III in plain English, with EUR-Lex references. What applies on 2 August 2026, what waits until 2027, what most small businesses can safely ignore.
Market
Cost benchmarks in euros.
Project costs compared across Belgium, the Netherlands, Germany, France, Ireland and the Nordics. SME-relevant budget ranges, not enterprise quotes.
Advisors
Honest reviews of advisors.
London, Dublin, Amsterdam, Berlin, Paris boutiques and the pan-European mid-market. Same criteria for everyone, including this site's publisher.
Strategy
Post-mortems of failed frameworks.
Which 2024–2025 'AI Transformation Roadmaps' have quietly been retired, what killed them, and what replaced them in 2026.
Source methodology
How we cite, in four tiers.
-
01 · Primary
Regulations, treaties, court rulings, official journals. EUR-Lex by article.
-
02 · Official
EU institutions, national authorities, statistical bodies, regulators.
-
03 · Secondary
Firms' own pages and case studies. Used to describe firms, never as proof of figures.
-
04 · Data
Datasets and indicators (DESI, CEDEFOP, Eurostat) with dated lookup.
Every briefing lists its sources, dated by the day of lookup, with the tier shown in the margin. See an example