Who can help a UK firm with the EU AI Act?

Part of the guide What does the EU AI Act ask of a UK business?

Can a UK firm with no EU office be covered?

Yes. A UK address does not settle the question. The EU AI Act can cover providers putting AI systems or general-purpose AI models on the EU market. It can also cover providers and users outside the EU where the system’s output is used in the EU.

The Act calls an organisation using an AI system under its authority a deployer. Personal use outside work is excluded from that definition. Eduardo Ustaran recommends checking how the rules apply to each system and role.

What kind of help should you look for?

Start with the job you want done. AI assurance means gathering and checking evidence about a system. It can include tests of how it works, checks against rules and an assessment of its effects on people.

Use the table as a way to question a potential adviser. Ask who will do each part and what they will hand over. These discussion prompts draw on government guidance and Ustaran’s suggested planning steps. They are not a list of compulsory services.

What should you take to the first meeting?

Bring a list of the AI your firm develops and uses. Eduardo Ustaran recommends this as the starting point for working out how the AI Act applies. His LinkedIn post is a practical view on preparation, rather than a statement of today’s legal duties.

For the meeting, try a simple description of each tool and what you want help deciding. For example: “We use this tool to draft replies. We need to understand which rules apply to that use.” This is an example question, not a legal conclusion.

What should a proposal explain?

Ask the provider to turn the findings into a clear plan. Ustaran’s suggested approach is to compare existing governance work with the requirements that apply, then set out the missing documents and measures in priority order.

These prompts help make that proposed work concrete. Agree the answers before choosing a package.

How much can an AI search tell you?

When The Assurance Desk asked 6 AI engines on 18 September 2026 who could help a UK firm with no EU office, their answers cited 44 links. Just 1 answer cited an official source. Each engine was asked once, from the UK, with web search on.

This was a small snapshot, not a test of adviser quality. Repeated links were counted. The full study asked another question too; the chart below shows only the question about finding help. Later answers may use different sources.

Treat the names in an AI answer as leads. Ask a provider to explain the rules and evidence behind its proposed work.

What to do

1. Start with Ustaran’s suggested list of the AI systems your firm develops and uses.
2. Use Ustaran’s next question: which rules apply to each system and role.
3. Separate testing and checking the rules from implementation. Ustaran recommends a plan that puts the missing work in priority order.
4. Request a written scope and clear responsibilities.

Common questions

Does buying an AI tool mean the supplier handles everything?

Start by checking your own role. The EU AI Act defines a deployer as the person or organisation using an AI system under its authority, apart from personal use outside work. Ustaran recommends assessing how the rules apply to each system and role.

Should we start by buying governance software?

Start by defining the work. Government guidance describes governance platforms alongside technical tools and professional services. Ask what each option would do for your firm, then compare it with the work you need.

Where next

• Exposed to the EU AI Act
• What does the EU AI Act ask of a UK business?
• EU AI Act timeline: the key dates after the July 2026 changes
• Do you need AI governance software, or is an adviser enough?
• Is there a qualification or certification for AI governance?

This is an independent editorial guide, not legal advice.