EU AI Act obligations for non-EU SaaS companies selling AI into Europe
A non-EU SaaS company should not assume the AI Act is irrelevant. The key questions are whether the system or model is placed on the EU market, whether output is used in the Union, and which role the company plays.
The questions to answer first
Most non-EU SaaS teams need a role-and-scope pass before drafting policies. The same product page can contain a model layer, a system layer, a customer deployment layer, and public-facing claims that trigger different evidence questions.
- Are you offering an AI system or GPAI model into the EU market?
- Are EU customers using outputs in the Union?
- Are you a provider, deployer, importer, distributor, or authorised representative?
- Does the product interact with people, generate content, or affect sensitive decisions?
- Do your EU customers need documentation from you to meet their own duties?
Common SaaS scenarios
A customer-support chatbot usually starts with Article 50 transparency questions. An HR screening product may require high-risk analysis. A foundation-model or model API provider may face GPAI duties. A workflow tool that only helps internal drafting may sit closer to AI literacy and vendor-evidence questions.
- Do not market “EU AI Act compliant” without evidence.
- Prepare customer-facing documentation before procurement asks for it.
- Separate current obligations from proposed timeline changes.
- Keep model/system architecture and intended-purpose notes current.
Minimum evidence bundle for EU sales
Before serious EU sales conversations, prepare a short evidence packet: product description, intended purpose, role position, AI-system versus GPAI-model analysis, customer instructions, transparency copy if relevant, training-data summary if relevant, and a contact path for compliance questions.
FAQ
Does the AI Act apply only to EU companies?
No. Non-EU providers and deployers can be in scope depending on market placement, use of output in the Union, and role.
Should a non-EU SaaS company appoint an EU representative?
That depends on the role and product/model category. GPAI providers outside the EU should pay particular attention to authorised-representative questions.
Turn this reading into an actionable report
Use the free scanner to map your likely role, detect likely obligations, and see which evidence is missing.