See
Identify AI tools and AI features already in use.
Proportionate AI compliance for SMEsSTART SMALL.
START SMALL.
GOVERN WHAT MATTERS.
Blanche helps Irish SMEs prepare for the EU AI Act with a focused approach that matches controls to the AI they actually use.
01No enterprise overhead02Phased packages03Reusable work04Clear management evidence
What does an SME need to do about the EU AI Act?
An SME should identify its AI systems and roles, stop prohibited practices, give people appropriate AI literacy, set clear usage rules, assess higher-impact uses and keep evidence of decisions and controls.
01 / Proportionate scope
You may need governance, not a new department.
A 30-person business using generative AI for drafting has different needs from a company deploying AI to rank candidates or make access decisions. The goal is to understand that difference and put effort where the potential impact is greatest.
Blanche's SME model starts with a short discovery and expands only where the systems, roles or risks justify deeper work.
02 / Common gaps
Informal AI use needs to become visible.
SMEs often discover AI through employee use of public tools or features added to existing software. Common gaps include no approved-tool list, no rules for company data, limited output verification, unclear ownership and no record of supplier review.
- No reliable list of AI systems
- No acceptable use policy
- Staff have not received practical guidance
- Important outputs are not consistently checked
- AI suppliers and features are not reviewed
- Incidents have no clear reporting route
03 / A sensible foundation
Build evidence as you improve control.
A proportionate foundation can include an AI usage snapshot, policy, approved-use rules, staff literacy guidance, verification requirements, ownership and a simple incident route. Businesses with more systems or sensitive use can add an inventory, risk screening and supplier review.
This creates an evidence trail showing what management identified, decided and implemented, without pretending that a short policy resolves every regulatory question.
Clear sequence. Clear ownership.
Set rules
Define approved use, data boundaries and verification.
Prioritise
Escalate higher-impact or uncertain systems.
Evidence
Keep records of decisions, guidance and reviews.
Common questions
Useful answers before you start.
01Does a small company need an AI inventory?+
If the business uses more than one AI tool or AI-enabled system, a simple inventory is a useful way to assign ownership and identify what needs review.
02What is the smallest sensible first step?+
For everyday employee AI use, start with a usage snapshot, clear policy, practical staff guidance, verification rules and an incident route.
03Do SMEs receive special treatment under the AI Act?+
The Act includes measures intended to support SMEs, but smaller size does not remove applicable obligations. Proportionality and the actual role and risk remain important.
04Can we add more governance later?+
Yes. Blanche packages are designed to build in phases, and reusable completed work can support a later, broader scope.
Ready when you are
Ready to put this in place?
Tell us briefly how your organisation uses AI. We will review the context and confirm the most useful next step before discussing scope.
No assessment or estimate is required before you enquire.