If you operate in the UK and serve EU customers, the EU AI Act applies to you whether or not your servers sit in the EU. The UK regime is more sectoral, but it is converging.
For most of our clients, readiness comes down to four artefacts:
- A risk classification per product surface.
- A model card and an evaluation report you can hand to a regulator.
- A logging regime that captures inputs, outputs, and operator overrides.
- An incident process that names a human accountable owner.
None of this is exotic, but it is rarely in place when we arrive. We treat readiness as a deliverable in every AI Platforms engagement.