Question 1

What is the AI Act and which companies does it affect?

Accepted Answer

The AI Act (Regulation (EU) 2024/1689) is the world's first comprehensive legislation on artificial intelligence. It affects any company that develops, deploys, or uses AI systems in the European market, regardless of where it is established. It classifies systems by risk levels (unacceptable, high, limited, minimal) and imposes proportional obligations. Fines can reach 7% of global turnover.

Question 2

Does my SME have to comply with the AI Act?

Accepted Answer

Yes, if your SME develops or uses AI systems in the EU. The AI Act does not exempt by size, although it provides support measures for SMEs (regulatory sandboxes, reduced fees). What matters is the risk level of the system, not the size of the company.

Question 3

What is the difference between the AI Act and GDPR?

Accepted Answer

GDPR regulates the processing of personal data; the AI Act regulates AI systems as products. They are complementary: an AI system processing personal data must comply with both simultaneously. LEXUR analyzes both frameworks in an integrated manner.

Question 4

What penalties does the AI Act impose?

Accepted Answer

The AI Act establishes three penalty levels: up to €35 million or 7% of global turnover for prohibited practices; up to €15 million or 3% for non-compliance with high-risk obligations; and up to €7.5 million or 1.5% for providing incorrect information to authorities. AESIA is the competent authority in Spain.

Question 5

What is LEXUR and what is it for?

Accepted Answer

LEXUR is a legal intelligence engine specialized in AI regulation. It allows you to query regulations citing exact articles (Consult Mode), design systems with compliance from the start (Architect Mode), and audit existing systems generating exhaustive compliance reports (Audit Mode).

Question 6

How does LEXUR audit an AI system?

Accepted Answer

You upload your system documentation (technical design, DPIA, user manual). LEXUR extracts the system profile, classifies its risk under the AI Act, evaluates each applicable obligation against your documentation, and generates a structured report with findings (COMPLIANT / NON-COMPLIANT / GREY-ZONE).

Question 7

Is data hosted in Europe?

Accepted Answer

Yes. All LEXUR infrastructure operates in the European Union (Hetzner, Falkenstein, Germany). Documents uploaded for audit are processed under European jurisdiction, embeddings are private per project and purged upon project deletion.

Question 8

What legal documents does LEXUR cover?

Accepted Answer

LEXUR covers the complete relevant corpus: EU AI Act (Regulation 2024/1689), GDPR (Regulation 2016/679), LSSI-CE (Law 34/2002), AEPD guidelines on AI and audits, AESIA statutes, and the NIST AI RMF and NIST GenAI frameworks. All sources are official and kept up to date.

Frequently Asked Questions