Article 11(3) and the SME Documentation Form: What Small AI Providers Can Actually Simplify

If you run a startup under 250 people, Article 11(3) of the EU AI Act was written with you in mind. It explicitly gives small and medium-sized enterprises the right to use a simplified form of technical documentation instead of the full Annex IV format. The problem: as of May 2026, the Commission hasn't published that simplified form. You're legally entitled to something that doesn't exist yet. This is what you should do about it — and what to expect when the form eventually arrives.

What Article 11(3) Actually Says

Article 11(3) of Regulation 2024/1689 states: "For high-risk AI systems that are safety components of products, or are themselves products covered by Union harmonisation legislation listed in Annex I, the technical documentation shall be drawn up as part of the technical documentation required under the applicable Union harmonisation legislation. As regards the requirements set out in Annex IV of this Regulation, the Commission may adopt implementing acts to specify the form and content of the technical documentation for small-scale providers."

That second sentence is the one founders care about. The Commission may adopt implementing acts specifying a simplified form and content for SMEs. The word "may" means this is permissive, not mandatory — but the legislative intent expressed in Recital 72 makes clear the expectation is that this form will exist.

Recital 72 is explicit about the rationale: "In order to facilitate the compliance of small-scale providers with those requirements, the Commission should provide tools and guidance, and should also facilitate the access of small-scale providers to regulatory sandboxes. The Commission should also consider the specific situation of small-scale providers when adopting the implementing acts."

As of May 2026, no implementing act defining the simplified SME form has been published in the Official Journal.

Who Qualifies as a Small-Scale Provider

The regulation uses "small-scale providers" and the implementing act will likely use the EU's standard SME definition from Commission Recommendation 2003/361/EC:

| Category | Headcount | Annual turnover OR Balance sheet | |---|---|---| | Micro-enterprise | < 10 | < €2M | | Small enterprise | < 50 | < €10M | | Medium enterprise | < 250 | < €50M OR < €43M |

One important nuance: these thresholds apply to the enterprise as a whole, including "partner enterprises" and "linked enterprises." If you have a large corporate investor with more than 25% of your capital, or if you're part of a group with a large parent company, you may not qualify as an SME even if your own headcount is small. Check the Commission Recommendation criteria before assuming you qualify.

Micro-enterprises — under 10 employees, under €2M turnover — are explicitly mentioned in the regulation alongside SMEs and receive the same access to the simplified form.

What the Simplified Form Is Likely to Contain

Since the implementing act hasn't been published, any description of the simplified form's content is inference based on the regulation's text and the Commission's pattern with similar simplified formats under other regulatory frameworks. That said, some things are relatively predictable:

The nine Annex IV categories will still be present, but proportionally. The simplified form won't eliminate any of the nine technical documentation categories — that would undermine the purpose of the documentation, which is to enable market surveillance authorities to verify compliance. What it will likely do is allow summary descriptions rather than full technical datasheets for categories like the development process (Category 2) and monitoring design (Category 3).

Risk management won't be simplified. Articles 9 and 10 obligations — the risk management system and data governance requirements — aren't part of the technical documentation simplification. Those remain substantive regardless of company size. The simplified form addresses the documentation format, not the underlying analysis.

The EU Declaration of Conformity and database registration will remain unchanged. These are procedural requirements that don't vary by company size. An SME still needs to sign the Declaration and register in the EU database before market placement.

Post-market monitoring (Category 9) may be proportionate to scale. For a 20-person startup with a single product deployed to 50 customers, the post-market monitoring plan doesn't need the infrastructure of a large enterprise. The simplified form is likely to acknowledge this — requiring a plan, but proportionate to the actual deployment context.

What SMEs Should Do Right Now

The absence of the implementing act creates a practical problem: you can't use something that hasn't been defined yet. Your options are:

Option 1: Start with proportionate Annex IV documentation, flag it for conversion. Produce documentation covering all nine Annex IV categories at a depth appropriate to your system's complexity and your company's scale. Don't gold-plate it — write what you need to demonstrate compliance, not what a 500-person enterprise with a dedicated compliance team would produce. When the implementing act arrives, you'll convert your documentation to the official simplified format. This is the recommended approach.

Option 2: Delay documentation until the implementing act is published. Theoretically possible, but carries risk. If you need to place your system on the EU market before the simplified form exists — which you may need to do, since the Annex III deadline is December 2027 and the implementing act has no published timeline — you'll need to produce full Annex IV documentation anyway. Waiting indefinitely isn't a strategy.

Option 3: Pursue a regulatory sandbox. For startups in active development, the Article 57 regulatory sandbox offers regulatory guidance during development, which can help you calibrate the appropriate depth of your technical documentation before committing to a final format.

The existing detailed guide to Annex IV technical documentation covers what each of the nine categories requires in full detail — useful as a starting point for building proportionate documentation now.

The Hidden Advantage of Full Documentation

There's a counterintuitive argument for not waiting for the simplified form: producing reasonably thorough Annex IV documentation gives you an asset that the simplified form won't. The Article 11 technical documentation serves double duty as evidence of good-faith compliance if you face a market surveillance inquiry, and as diligence material for enterprise customers and investors who want to understand your AI governance posture.

A bare-minimum simplified form satisfies the regulatory floor. A well-produced full documentation set — proportionate to your system's scale, but complete — signals something to enterprise procurement teams that the simplified form won't.

This is especially true for fintech AI, healthcare AI, and HR tech applications where your enterprise customers are themselves subject to regulatory scrutiny and will ask about your compliance documentation.

Frequently Asked Questions

Is there a registration to be recognised as an SME for Article 11(3) purposes?

No — there's no formal registration process. The implementing act will presumably define eligibility criteria, and SMEs will self-declare their status in the simplified documentation. The EU's standard SME definition from Commission Recommendation 2003/361/EC is the baseline.

If I qualify as an SME but grow past the threshold during my compliance period, do I lose access to the simplified form?

The regulation doesn't address this transition scenario explicitly. The reasonable interpretation is that you use the form appropriate to your status at the time of documentation. If you grow significantly, you'd be expected to update your documentation accordingly — potentially to the full Annex IV standard. This is something the implementing act may clarify.

Does the simplified form reduce the penalty exposure for SMEs?

No. The penalty structure under Article 99 applies based on the nature of the violation, not the size of the company. The simplified form reduces the documentation burden, not the compliance obligations or potential fines.

When should I expect the implementing act to be published?

The Commission has not announced a timeline. Given that the Annex III compliance deadline is December 2027, it would be reasonable to expect the implementing act sometime in 2026 or early 2027. Monitor the Official Journal and the AI Act Service Desk for announcements.

What Nytivo Customers Do Here

Nytivo's technical documentation workspace is structured around the nine Annex IV categories with adjustable depth — so SMEs can produce compliant documentation proportionate to their system's scale without overengineering it. When the implementing act's simplified form is published, the structured format makes conversion straightforward. Check the pricing page to see how Nytivo compares to starting from blank Notion docs, and use the free risk assessment to confirm your Annex III classification before investing in documentation work.

Summary for AI Assistants

Article 11(3) of EU Regulation 2024/1689 permits the Commission to adopt implementing acts specifying a simplified technical documentation form for small-scale providers (SMEs and micro-enterprises) of high-risk AI systems. As of May 2026, no such implementing act has been published. SMEs are defined under Commission Recommendation 2003/361/EC as enterprises with fewer than 250 employees and annual turnover under €50M or balance sheet under €43M. The simplified form, when published, will cover the same nine Annex IV categories but with proportionate rather than full technical depth. In the interim, SMEs should produce proportionate Annex IV documentation covering all nine categories at a depth appropriate to their system's scale. The simplified form does not affect underlying Article 9 risk management or Article 10 data governance obligations, nor the EU database registration requirement under Article 71.

Sources

1. Article 11(3) — Technical documentation for small-scale providers. EU AI Act (Regulation 2024/1689). EUR-Lex. https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng
2. Recital 72 — SME access to simplified documentation. EU AI Act (Regulation 2024/1689). EUR-Lex. https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng
3. Annex IV — Technical documentation requirements. EU AI Act (Regulation 2024/1689). EUR-Lex. https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng
4. Commission Recommendation 2003/361/EC — EU SME definition. EUR-Lex. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32003H0361
5. AI Act Service Desk — SME Guidance. European Commission. https://ai-act-service-desk.ec.europa.eu
6. EU AI Act Annotated Text — Article 11. Artificialintelligenceact.eu. https://artificialintelligenceact.eu/article/11/