Skip to content
AI Security

Interview question · AI Governance, Risk & Compliance

Does the EU AI Act apply to a company with no EU office?

Location of the office is not the test. Where the system is placed, used, or where its output is used, is.

mediumNewPreparation tags: Microsoft, Salesforce, Scale AIUpdated Nov 2026

Location of the office is not the test. Where the system is placed, used, or where its output is used, is.

Make your first attempt

What would you say before reading the answer?

  1. 01 State the assumptions your answer depends on.
  2. 02 Explain the mechanism and choose a control.
  3. 03 Name a condition that would change your decision.

The worked answer includes an approach, scoring criteria and follow-up questions. Compare the reasoning with your own.

signing in unlocks more free answers per topic

What if · the follow-ups in this answer

The answer works through 6 follow-ups like an interviewer would

A US company with no EU offices sells an AI-based résumé screening product to a few European customers and asks whether the EU AI Act applies to it.

  1. Does the Act apply to companies outside the EU?
  2. Does it apply to this product specifically?
  3. What extra step applies to non-EU providers?
  4. What if the company only sells in the US but a US customer uses it on EU applicants?
  5. Which exclusions might apply?
  6. What would you advise the company?

Each rung has a nudge, a model answer, the principle that carries over and the weak answer to avoid. Sign in free to open it.

UP NEXT ON YOUR JOURNEY
Next in this trackHow do you govern shadow AI?Next in this trackTurn AI risk management into engineering practice: owners, gates and release criteria.Next in this trackWhat does the NIST Generative AI Profile (NIST AI 600-1) add to the core AI Risk Management Framework?
DISCUSSION · 0

No comments yet. Share a correction or a different way to answer it.