Edvantis Hosts AI Compliance Webinar: How to Get Ahead of AI Regulation in 90 Days
Rzeszów, Poland — October 22, 2026 — On October 14, Edvantis hosted an online webinar “AI Compliance in Business and Technology: What the Law Requires and How to Get Ahead of It”.
The session was led by Sergii Shelpuk, AI Consulting Expert with 15+ years of experience helping global enterprises adopt AI at scale. The webinar covered why compliance protects the business rather than slows it down, how the EU and US regulate AI differently, and a 90-day governance plan that one person can run part-time. Here are some of the key takeaways.
AI speaks for the company. Courts already treat it that way.
A tribunal has already ruled that a customer-facing chatbot speaks for the company: whatever it told a customer, the company told the customer. The same logic applies to vendor tools. Under the EU AI Act, a company that uses someone else’s AI in its operations is a deployer, responsible for human oversight of the decisions the system makes and for being able to trace how each decision was reached.
You don’t need an EU entity to fall under the EU AI Act.
The Act applies to anyone who builds, deploys, imports or ships AI into the EU market, and to any company outside the EU whose AI output reaches EU users. GDPR works the same way. The US has no horizontal AI law: liability comes after the harm, through existing discrimination, contract and consumer law, with a patchwork of state statutes on top and an active federal effort to dismantle them. The one state that copied the EU model replaced it within months with a narrower disclosure-only law. For a company that sells into both markets, the EU framework is the one to build on; the US is where the lawsuits arrive afterwards.
Seeing and hearing a colleague on a call is no longer verification.
Deepfake fraud has already produced a $25M loss in a single incident, with no systems breached. As Sergii put it, you cannot expect every employee to tell a deepfake from a colleague; that is what a framework is for. The control is dull and cheap: payment authorization over a separate channel.
Compliance is governance you need regardless. It starts with a census.
The first 30 days need one person working part-time and one spreadsheet: pull invoices, SSO logs, API keys and procurement contracts, ask department heads three questions, log one row per system, and sort them into red, amber and green with a named owner for every red one. In Sergii’s experience the count comes in three to five times higher than the estimate, and the highest-risk system is usually one nobody bought as AI; it arrived as a feature in a tool the company already had. The next 60 days close the obligations that already apply: a one-day check against the Act’s banned practices, where penalties reach 7% of global turnover, gating any system that can act on production without approval, staff training, and vendor contracts.
Half of attendees said their company has a formal AI policy. 47% said they have no idea how many AI systems run in it. Only 12% knew exactly.
Watch the Webinar Recording
The presentation materials are also available on the AI Compliance in Business and Technology webinar page.
About Edvantis
Edvantis is a global software engineering and consulting company with over 20 years of experience and 400+ technology professionals. With deep expertise in AI, data engineering, and system integrations, Edvantis helps businesses build reliable technology solutions that drive efficiency and long-term growth.
