Opinion · EU AI Act

Governance belongs in the building block.

The EU AI Act applies in full from 2 August 2026. Treat governance as a building block rather than a brake, and you are ready sooner than those who wait for it.

Governance in the building block
One building block built in Who sees the data Where it ends up Who reads the logs Who signs for exceptions Agreed before the rollout, not after 2 Aug 2026
Four governance questions live inside the block itself, not in a separate compliance folder. Agreed up front, ready before the deadline applies.

The deadline is a fact.

From 2 August 2026 the AI Act applies in full. That is not a threat, it is a given. You do not design a given away, you design around it. The question is not whether you comply, but whether you build governance in up front or bolt it on afterwards.

Fear is the wrong response.

For most scale-ups this is not a complex document. It only becomes a problem when an organisation first rolls out ten separate AI solutions and then finds that no one can say who sees which data, or where a decision came from. The fear is not in the law. It is in the absence of design.

Governance as a design choice.

Four questions belong in every building block. Who sees which data. Where it ends up. Who has access to an agent's logs. And who signs for exceptions. Not in a separate compliance folder, but in the block itself. That makes privacy, traceability and accountability concrete instead of abstract.

What a scale-up does now.

For each agent, set out what may run autonomously and what goes to a person. Log what an agent does. Appoint an internal owner who signs for exceptions. That is governance at the scale of a scale-up: light, built in, ready before the deadline matters. The law becomes a condition, not a brake.

Back to writing