EU AI Act August 2026: What Every DACH Business Must Do in the Next 93 Days

What the EU AI Act Actually Requires

The EU AI Act (Regulation EU 2024/1689) is the world's first comprehensive AI regulation. It applies to any company that places AI systems on the EU market — regardless of where the company is registered. This means Swiss, German, and Austrian businesses are all subject to its requirements.

The Risk Tier System

Does the EU AI Act Apply to Swiss Companies?

Yes. Switzerland is not an EU member state, but the EU AI Act has extraterritorial scope — it applies to any company whose AI outputs affect EU citizens or that places AI systems on the EU market. A Swiss-registered company with German, Austrian, or French clients is subject to the Act's requirements for those client relationships.

Switzerland is additionally implementing equivalent provisions through its ongoing bilateral agreement framework and the Federal Council's AI strategy, which aligns closely with EU AI Act principles. Swiss companies should plan for full compliance rather than partial exemption.

What High-Risk AI Compliance Requires

1. Risk Management System: A documented, continuously updated risk management process for every high-risk AI system deployed. Not a one-time assessment — an ongoing monitoring obligation.
2. Data Governance: Documented data practices for training, validation, and testing datasets. AI systems must be trained on data that is relevant, representative, and free from errors that could create bias.
3. Technical Documentation: Comprehensive documentation that allows authorities to assess compliance. This must exist before the AI system is placed on the market.
4. Transparency & Information: Users of high-risk AI systems must receive clear information that they are interacting with an AI. The AI system's capabilities and limitations must be documented.
5. Human Oversight: High-risk AI systems must be designed to allow human oversight. Humans must be able to monitor, intervene, stop, or override the AI at any point.
6. Accuracy, Robustness & Cybersecurity: Documented performance metrics, ongoing monitoring, and cybersecurity measures appropriate to the risk level.

The 93-Day DACH Compliance Sprint

With 93 days remaining, here is the prioritized action sequence for DACH SMBs:

• Days 1–7: Audit all AI tools currently in use across every department. Classify each as Unacceptable, High Risk, Limited Risk, or Minimal Risk. This is the NemoClaw assessment.
• Days 8–30: For every High Risk AI system, begin documentation: risk management process, data governance record, technical documentation template.
• Days 31–60: Implement human oversight protocols for High Risk AI systems. Assign accountability. Deploy audit logging.
• Days 61–90: Internal review and gap closure. Engage legal counsel for final compliance sign-off. Register as an AI provider if required.
• Day 93 (August 2): Enforcement begins. All documentation must be complete and available for regulatory inspection.

NemoClaw: The DACH-Native Compliance Assessment

NemoClaw is a structured EU AI Act compliance assessment built specifically for DACH businesses. It was built by Gilbert Cesarano after discovering that no existing compliance tool was built for the DACH regulatory context, multilingual by design, or commercially backed by a Swiss-registered entity. The assessment covers all four high-risk AI Act obligations and produces a remediation roadmap with estimated effort and timeline. Assessment: CHF 3,000. 8 slots remaining before the August deadline.

Frequently Asked Questions

Gilbert Cesarano · TennoTenRyu · CHE-272.196.618 · Zug, Switzerland · cesaranogilbert.com