Question 1

Which technology regulations could apply to us?

Accepted Answer

It depends on what you do, where you operate, who your customers are, and how you use technology. NudgeCompliant maps those facts across AI, cyber, operational resilience, data, and emerging technology rules.

Question 2

We're not based in the EU. Does any of this apply to us?

Accepted Answer

Potentially, yes — especially if you have EU customers, EU employees, or your AI's output is used in the EU. The EU AI Act has extraterritorial reach: being based elsewhere does not take you out of scope. Run the free audit to find out exactly what may apply to you.

Question 3

We only use ChatGPT and Copilot. Do we honestly need to care?

Accepted Answer

Usually yes, at least a bit. Using AI at work can make you a deployer. For most teams that means staff AI literacy under Article 4 and, where people interact directly with AI, transparency under Article 50. The free audit identifies which duties fit your use.

Question 4

What about NIS2 and DORA?

Accepted Answer

NIS2 focuses on cybersecurity governance and resilience across important sectors. DORA focuses on digital operational resilience in financial services. We show which duties fit your business and where the same evidence supports both.

Question 5

Do you cover rules that aren't final yet?

Accepted Answer

Yes, but we label them clearly. Emerging requirements such as proposed UK AI legislation are shown as anticipated preparation work, not as settled legal duties.

Question 6

I'm an accountant. Can I run this for my clients?

Accepted Answer

Yes. The Agency plan is designed for advisers managing multiple clients, with shared records and referral support.

Question 7

How is this different from calling a lawyer?

Accepted Answer

NudgeCompliant handles repeatable classification, documentation, and tracking. A qualified lawyer is still appropriate for novel, disputed, or high-risk cases.

Question 8

What do you do with our data?

Accepted Answer

We don't sell it or use it to train AI models. Data is stored in EU data centres. Full details are in the Privacy Policy.

Question 9

Does the EU AI Act apply to UK businesses?

Accepted Answer

Yes, in defined circumstances. A UK business can be in scope when it places an AI system on the EU market, deploys AI through an EU establishment, or produces AI output that is used in the EU. Post-Brexit, UK businesses are not automatically subject to EU law, but EU-facing activities can trigger duties such as Article 50 transparency from 2 August 2026.

Question 10

Does the EU AI Act apply to US companies?

Accepted Answer

Yes, in defined circumstances. The Act covers some providers and deployers outside the EU, including where they place AI on the EU market or where output from their AI system is used in the EU. Incorporation in the US does not by itself remove EU-facing AI activity from scope.

Question 11

What happens if I don't comply with the EU AI Act?

Accepted Answer

The highest fine tier can reach €35 million or 7% of worldwide annual turnover for certain prohibited-practice breaches. Other infringements can reach €15 million or 3%. The applicable maximum depends on the provision, the organisation, and proportionality rules; being outside the EU is not a shield where the Act applies.

Question 12

We just use ChatGPT. Does the EU AI Act apply to us?

Accepted Answer

Probably for at least some uses. A business using ChatGPT under its own authority may be a deployer. Article 4 AI-literacy duties can apply to staff use, while Article 50 transparency applies when people interact directly with an AI system or encounter certain AI-generated content. The free audit checks the use case rather than treating every ChatGPT use the same.

Question 13

What is the EU AI Act August 2026 deadline?

Accepted Answer

Article 50 transparency rules apply from 2 August 2026. They cover matters including disclosure when people interact directly with AI, notices for emotion-recognition or biometric-categorisation systems, and labelling requirements for specified synthetic or manipulated content. The exact action depends on the system and context.

Question 14

What is the difference between an AI provider and an AI deployer?

Accepted Answer

A provider develops an AI system or has one developed and places it on the market or puts it into service under its name or trademark. A deployer uses an AI system under its authority in a professional context. A company can have different roles for different systems, but most organisations using third-party workplace AI are deployers.

Question 15

How is NudgeCompliant different from hiring a compliance consultant?

Accepted Answer

Consulting engagements can cost tens of thousands of pounds and take weeks or months. NudgeCompliant automates repeatable classification, documentation, and tracking, beginning with a free four-minute audit. Specialist advice remains appropriate for complex, novel, or disputed cases.

Question 16

What regulations does NudgeCompliant cover?

Accepted Answer

NudgeCompliant currently maps the EU AI Act, NIS2, DORA, Cyber Essentials, GDPR and UK GDPR, selected US state AI laws, and Australia's AI safety framework. Emerging rules are labelled as anticipated rather than presented as enacted obligations.

Technology compliance, sorted.

This week in tech compliance:

🔴 EU AI Act

🟡 US update

🟢 Reporting deadline

One place for the rules shaping your technology

EU AI Act

NIS2

DORA

Cyber Essentials

UK AI regulation

GDPR / UK GDPR

California AB 2013

Australia AI Safety Standard

ISO/IEC 42001

Not based in the EU? It still applies to you.

Technology rules now reach every kind of business

Any business using AI tools

Fintechs

Tech startups

Professional services firms

Emerging tech companies

3 steps. Plain English. Done this afternoon.

Tell us what you use and where you operate

Get a plain-English readout

Stay sorted as things change

Everything you need to get sorted, and stay sorted

Know what applies to you

Generate the documents

Stay sorted

Why businesses are acting now

Sort your AI. Less than a lawyer's first reply.

Free

Starter

Growth

Agency

Questions people actually ask

Find out where you stand. About 4 minutes.