For US businesses
You're a US business. The EU AI Act applies to you.
If you have EU customers, EU employees, or your AI affects people in the EU, you may have obligations under the EU AI Act. Here's what that means for you.
Check your US + EU obligations →Why it applies
The EU AI Act has extraterritorial reach — like GDPR before it. It does not matter where your company is incorporated or where your servers are. Providers placing AI on the EU market, deployers located in the EU, and overseas providers or deployers whose AI output is used in the EU can all fall within its scope.
If someone in Germany uses your ChatGPT-powered chatbot, your HubSpot AI emails EU prospects, or your AI hiring tool screens EU candidates, those activities may bring you within the EU AI Act as a provider or deployer.
What US businesses typically need to do
The exact duties depend on your role and how each AI system is used. Common preparation work includes:
- ✓Article 50 transparency notice for chatbots and other AI interactions
- ✓An AI System Register listing the AI tools your organisation uses
- ✓A staff AI literacy training record
- ✓A human oversight policy for AI-assisted decisions
The fine print on fines
The EU AI Act's highest tier of fines can reach €35 million or 7% of worldwide annual turnover. EU regulators have already demonstrated cross-border enforcement through GDPR, so being US-based is not a shield when an activity falls within EU scope.
US regulations on top
Depending on what your business develops, deploys, and where it operates, US requirements may apply alongside the EU AI Act:
- ✓California AB 2013 — training-data transparency for covered generative AI developers, effective 2026
- ✓Texas HB 149 (TRAIGA) — AI restrictions and public-sector transparency, effective 2026
- ✓Colorado SB 26-189 — automated-decision transparency rules replacing SB 205, effective 2027
- ✓Federal AI legislation and policy — still developing, with timing uncertain
One audit across both markets
NudgeCompliant maps your US and EU obligations together, so the same policy, register, or training record can support more than one requirement.