Sahin Boydas
Random theme
Select theme
Back to all articles

7 Lessons on EU AI Act Compliance

Seven non-obvious lessons on making an AI product comply with the EU AI Act: risk tiers, documentation, data rules and the costs founders underestimate.

2024-07-066 min read548 words

Making an AI product fully compliant with the EU AI Act is a long, expensive project for any team that takes it on. It is brutal, but the lessons are invaluable. I'm breaking down the 7 most critical, non-obvious takeaways for any founder in the AI space.

Why Most Approaches Fail

Many common approaches to EU AI Act compliance are flawed at the root.

The root cause is usually one of three things:

Copying what big companies do without understanding why they do it. What works for Google doesn't work for a 10-person startup.

Over-engineering the solution when a simple approach would work better. I've seen teams spend six months building something that could have been done in two weeks.

Ignoring the human element. Technology is the easy part. Getting people to actually use it is where the real challenge lives.

What I've Learned From 134 Companies

Across 234 angel investments, including Anthropic, a few patterns in EU AI Act compliance come up again and again.

The founders who handle EU AI Act compliance well understand that timing is everything in this game.

The Numbers Don't Lie

Investing early in EU AI Act compliance can be the difference between raising your next round and running out of runway.

One of my portfolio companies went from struggling to profitable in under a year after they finally got serious about this. The founder told me later that they wished they'd started sooner.

This connects to broader themes around deepfakes, responsible AI, AI safety, EU AI Act that I've been thinking about a lot lately.

What's Next

Best practice in EU AI Act compliance is changing fast. What worked last year might not work next year. That's both the challenge and the opportunity.

My advice: stay curious, stay humble, and stay close to the people who are actually doing the work. Read less thought leadership and do more experiments. Talk to fewer consultants and more practitioners.

If you're building in this space, the best time to get EU AI Act compliance right is before you need to. Don't wait for a crisis to force your hand.

I'll keep sharing what I learn. This stuff matters too much to keep to myself.

FAQ

Frequently Asked Questions

Q:How do I know which items apply to my situation?

Start by honestly assessing where your biggest bottleneck is right now. The items that address that specific constraint will give you the highest return on your time and energy.

Q:Can I implement all of these at once?

I'd strongly recommend against it. Pick the 2-3 items that resonate most with your current situation and focus there. Trying to do everything simultaneously is a recipe for doing nothing well.

Q:Which item on this list has the highest impact?

It depends on your stage and context, but in my experience, the items near the top of the list tend to have the broadest applicability. That said, sometimes the less obvious items create the biggest breakthroughs for specific situations.

Q:Are these recommendations still relevant in 2026?

Absolutely. While specific tools and tactics change, the underlying principles remain consistent. I update my thinking regularly based on what I'm seeing in the market and across my portfolio companies.

Written by

Sahin Boydas

Serial entrepreneur, #1 angel investor, author of Becoming Top 1%

Get Sahin's Weekly Insights

Join 10,000+ founders and investors. One email per week with actionable advice on startups, investing, and building in the AI era.

No spam. Unsubscribe anytime.