The EU AI Act is law. Deadlines are live. hegyon.ai helps Swiss SMEs stay aligned, with built-in guardrails, audit-ready logging and AI-literacy support, so EU AI Act readiness becomes a feature of the platform you already use.
The EU AI Act enforces in stages. The first deadlines have already passed. High-risk obligations land in August 2026.
Article 4 AI literacy requirements and Article 5 bans on unacceptable-risk systems (social scoring, manipulative techniques) are already enforceable.
Transparency obligations and systemic risk assessments for foundation models and GPAI providers take effect.
The bulk of Annex III high-risk requirements, Article 50 transparency rules, and deployer obligations become enforceable. Fines up to 35M EUR or 7% of global turnover.
High-risk rules extend to AI embedded in regulated products, medical devices, automotive, aviation, and other EU product safety sectors.
Most Swiss SMEs underestimate what the EU AI Act asks of them. Here is why.
The AI Act introduces new concepts, risk classification, provider vs deployer roles, Annex III categories, that do not map to existing IT governance frameworks.
Articles 11, 12, and 17 demand technical documentation, automatic logging, and quality management systems that most AI deployments were never built to produce.
Employees use AI tools without IT oversight. Every unmonitored interaction is a compliance liability, and most organisations cannot even inventory their AI systems.
Traditional IT controls were designed for deterministic systems. AI is probabilistic. Bolting compliance onto each system individually does not scale.
hegyon.ai builds the safeguards in, between your people, your data and your AI models, so audit trail and policy enforcement come with the platform you already use, not as a separate project.
Data protection rules, content restrictions, and compliance guardrails enforced automatically at every AI interaction. No manual oversight gaps.
Art. 9 · Art. 10 · Art. 26Every query, response, model invocation, and access event logged with full context. Exportable, auditable, retention-managed.
Art. 12 · Art. 16 · Art. 72Continuous oversight of all AI interactions across your organisation. Policy violations flagged instantly. Incident triggers built in.
Art. 14 · Art. 72 · Art. 73Swiss-hosted in Hostpoint's ISO 27001-certified data centres. Sensitive data is masked by our Guard before any external AI model sees it. On-premise option available for stricter isolation.
Art. 15 · GDPR · Data SovereigntyFrom initial assessment to continuous monitoring, clear deliverables mapped to specific EU AI Act obligations.
Inventory every AI system in your organisation, determine provider/deployer roles, and classify risk levels according to Annex III.
Configure the Sensitive Data Guard and compliance rules with data protection guards, role-based access, and model routing policies tailored to your business.
Establish logging infrastructure, export formats, and evidence collection pipelines that satisfy Art. 11/12 and prepare you for regulatory scrutiny.
Continuous monitoring with policy-based incident triggers, reporting workflows, and post-market surveillance aligned to Art. 72/73.
A structured, four-phase approach that moves you from regulatory uncertainty to operational readiness.
Inventory AI systems, classify risk levels, determine provider/deployer roles across your organisation.
Set up governance policies, data protection guards, access controls, and model routing rules.
Deploy the Sensitive Data Guard and compliance configuration, connect data sources, activate audit trails and monitoring.
Continuous oversight, incident detection, reporting readiness, and iterative policy refinement.
Direct alignment between platform capabilities and regulatory requirements.
If your organisation uses AI in any of these domains, Annex III high-risk requirements apply by August 2026.
Credit scoring, insurance underwriting, fraud detection, and algorithmic trading systems.
Diagnostic AI, clinical decision support, patient triage, and medical device integration.
CV screening, candidate ranking, performance evaluation, and workforce analytics.
Benefits administration, eligibility assessment, law enforcement support, and border management.
Book a compliance assessment with our team. We will map your AI systems to EU AI Act obligations and show you the fastest path to operational readiness.