The EU AI Act Won’t Hit Your AI Team First — It Will Hit Your Supply Chain

Editor's take

The EU AI Act will primarily impact companies that integrate AI systems into their own products and services, rather than AI developers themselves. This means manufacturers of physical goods, from cars to medical devices, will face the brunt of compliance efforts.

This regulatory shift is significant because it decentralizes AI governance, pushing responsibility onto downstream users and their established supply chains. Companies like Volkswagen or Siemens, which incorporate AI into their manufacturing processes or final products, will need to audit and ensure compliance for all AI components, regardless of origin. This could create substantial friction for a broad range of industries.

Future scrutiny will focus on how effectively these downstream companies can demonstrate compliance, particularly with third-party AI models. The ability to trace and verify the safety and fairness of embedded AI will become a critical differentiator, potentially leading to increased demand for transparent and auditable AI components.