GUIDE DE LA SOCIÉTÉ

Does the EU AI Act Apply to Non-EU Companies?

The EU AI Act can apply to providers outside the EU that place an AI system or general-purpose model on the EU market, and to non-EU providers or deployers when system output is used in the Union.

  • 3 minutes de lecture
  • Dernière mise à jour
Sur cette page3 minutes de lecture
  1. Aperçu
  2. Plongée profonde
  3. Impact stratégique
  4. The Future of Does the EU AI Act Apply to Non-EU Companies?
  5. Mise en œuvre dans le monde réel
  6. Risques et garde-fous
  7. Feuille de route de mise en œuvre
  8. Continuez à explorer
  9. Questions fréquemment posées

Aperçu

Scope depends on the actor, activity, and legal exceptions.

Plongée profonde

Article 2 sets out who and what the AI Act covers. It applies to providers placing AI systems on the market or putting them into service in the Union, and to providers placing general-purpose AI models on the Union market, regardless of where those providers are established. It applies to deployers established or located in the Union. It can also apply to providers and deployers established in a third country when the output produced by the system is used in the Union. The output-use rule is not a simple website-access test. A non-EU service may be accessible from Europe without every interaction necessarily meeting the relevant scope condition; facts about the provider, deployment, system output, and use matter. Conversely, routing processing through servers outside Europe does not automatically avoid scope when output is used in the Union. Importers, distributors, product manufacturers placing a system under their own name, and authorized representatives have separate listed roles. A company can hold more than one role depending on its conduct. Article 2 includes exceptions, including for certain systems and activities related to military, defence, or national-security purposes, personal non-professional use by deployers, and specific research and development circumstances. These exceptions are conditioned and should not be generalized. The Regulation also has special rules for public authorities in third countries using systems under international law-enforcement or judicial-cooperation arrangements where adequate safeguards are provided. A non-EU provider should map the product’s market entry and intended use, identify its role under the Act, determine whether an EU authorized representative is required, and assess applicable duties by system or model category. Keep evidence of where output is used and which entity controls deployment. Get advice for complex cross-border arrangements; geography alone is not a complete scope analysis.

Impact stratégique

Risques et sécurité

Les dommages catastrophiques et quotidiens causés par l’IA dépendent tous deux de la personne qui comprend les risques et qui peut agir.

Décisions plus claires

Les connaissances du public et des professionnels déterminent si une politique de sécurité forte est politiquement possible.

Passer à travers le battage médiatique

Des explications claires réduisent la capture par le battage médiatique, les relations publiques en laboratoire et le théâtre d'éthique vague.

The Future of Does the EU AI Act Apply to Non-EU Companies?

The Act’s general application began on 2 August 2026. Under the AI Omnibus now in force, Annex III high-risk system rules apply from 2 December 2027, while Annex I product-embedded high-risk system rules apply from 2 August 2028. The AI Office, Commission guidance, and courts may clarify cross-border application. International businesses should maintain a current role matrix and check the consolidated Regulation, amendments, and national implementation rather than rely on a single country-of-incorporation test. Reassess scope when a product launch, rebrand, deployment location, or downstream use changes. Build periodic review into procurement, legal updates, and release management. Recheck at market entry.

Mise en œuvre dans le monde réel

A U.S. model provider places a GPAI model on the EU market and evaluates its provider duties despite having no EU office.

A non-EU analytics vendor checks whether its output is used in an EU hiring workflow.

A European reseller confirms whether it acts as importer or distributor for an AI system.

A company that sells a system under its own brand checks whether it becomes the provider.

Risques et garde-fous

  • Traiter le risque existentiel comme de la science-fiction alors que les capacités s’accroissent.

  • Confondre sécurité des produits de surface et alignement sous haute autonomie.

  • Laisser le public non anglophone et non expert avec uniquement des sources de mauvaise qualité.

Feuille de route de mise en œuvre

  1. Séparez les dommages causés aux produits, leur mauvaise utilisation et les risques de perte de contrôle/désalignement.

  2. Demandez quelles preuves pourraient changer votre point de vue sur les délais et la gravité.

  3. Préférez les sources primaires et les évaluations concrètes aux allégations marketing.

  4. Identifiez une voie d’action : carrière, politique, financement ou compétences – et pas seulement la sensibilisation.

Continuez à explorer

Free newsletter

Get the daily AI briefing

Three verified AI stories every weekday morning, written in plain English. Free forever, no ads.

One email each weekday. Unsubscribe in one click. We never sell or share your address.

Test yourself

Take the Does the EU AI Act Apply to Non-EU Companies? quiz

Instant feedback on every answer, and a shareable certificate with a verifiable ID once you pass a course.

Démarrer le quiz

Support free AI education. AI Understanding is a 501(c)(3) nonprofit — no ads, no paywall, ever. Make a donation

Questions fréquemment posées

Does the EU AI Act Apply to Non-EU Companies?

The EU AI Act can apply to providers outside the EU that place an AI system or general-purpose model on the EU market, and to non-EU providers or deployers when system output is used in the Union. Scope depends on the actor, activity, and legal exceptions.

Can an AI provider outside the EU fall within Article 2?

The Act applies to specified providers regardless of establishment location.

When can a non-EU provider or deployer be covered by the output rule?

Article 2 includes third-country actors where output is used in the Union.

Does server location alone decide territorial scope?

The Regulation’s scope provisions do not reduce to server geography.

Which role can a company take by placing a system under its own name?

The Act lists product manufacturers placing a system under their own name as potentially responsible providers.

Does a European reseller have no duties because it did not train the model?

The Act lists multiple operator roles beyond model training.