Small Mid-Cap Relief in the EU AI Act: What the New Category Means for Swiss SMEs
In short
The Digital Omnibus to the EU AI Act introduces the 'Small Mid-Cap' category: companies with up to 750 employees and maximum €150 million revenue receive simplified documentation requirements, proportionate quality standards, free sandbox access and reduced penalty caps. For scaling Swiss SMEs, this means the leap beyond 250 employees no longer becomes a compliance trap. Instead of drowning in admin costs when growing, larger mid-market firms stay agile—if they use the relief measures strategically.
Why the Small Mid-Cap Category Is a Game-Changer
Until now, the EU AI Act recognised only the standard SME definition: under 250 employees, maximum €50 million revenue or €43 million balance sheet. Above that, you were treated as a large enterprise—with full obligations. For many Swiss industrial firms, medtech companies or precision suppliers in the 250–750 employee range, this was absurd: technically mid-market, regulatorily corporate.
The Digital Omnibus fixes this design flaw. Since the final text was published on 30 July 2026, companies with fewer than 750 employees and revenue up to €150 million (or balance sheet up to €129 million) are recognised as Small Mid-Caps. They receive tailored relief—without being exempted from high-risk governance.
What Relief Measures Apply in Practice
- Simplified technical documentation: the Commission provides pre-defined templates that notified bodies must accept. You don't start from scratch.
- Proportionate quality systems: instead of full ISO 9001-style governance, risk-based, scaled processes suffice—tailored to your company size.
- Priority access to regulatory sandboxes: you can test high-risk AI under supervision before going live—free of charge under Article 58 of the AI Act.
- Reduced penalty caps: maximum fines are adjusted proportionately. Instead of blanket penalties up to €15 million or 3% of global revenue for high-risk violations, Small Mid-Caps face lower ceilings.
These adjustments are not gifts but the result of intense lobbying. The Commission pushed through the 750-employee threshold; Parliament originally wanted 1,000 employees and €200 million but did not prevail.
What This Means for Swiss Mid-Market Firms
Switzerland falls under extraterritorial scope: Article 2(1)(c) of the AI Act applies whenever your AI output is used in the EU—even without an EU presence. For export-oriented Swiss SMEs, the Act is binding. At the same time, recent figures show 34% of Swiss SMEs consciously integrate AI (Axa/Sotomo survey, October 2025). Many of these firms are growing—and previously hit the 250-employee threshold hard.
With the Small Mid-Cap category, compliance stays affordable. You don't have to pull the handbrake at 249 employees because admin burden would otherwise explode. Instead, you scale governance in parallel with business. This is crucial for sectors like mechanical engineering, automation or precision medicine, where AI is increasingly embedded—for instance in agents handling maintenance, quality assurance or process control.
Keep Deadlines in Sight
High-risk AI systems under Annex III must be compliant by 2 December 2027; product-embedded systems by 2 August 2028. Use the remaining time for sandbox access—supervised testing drastically cuts later remediation costs.
Sandboxes: Your Right to Supervised Experimentation
Regulatory sandboxes are controlled test environments where you can develop and validate high-risk AI under authority supervision. For SMEs and Small Mid-Caps, this access is free. This is not a nice-to-have but a strategic tool: you can clarify compliance uncertainties before investing, and authorities learn how your technology works.
In practice: if you deploy AI for risk classification in lending or automated personnel selection (classic Annex III use cases), you first test documentation, bias metrics and data quality in the sandbox. The authority gives feedback. You iterate. When you go live, the risk of audit or penalty is massively lower.
The Context: Why the EU Is Course-Correcting Now
250–750
employees: the new Small Mid-Cap band protecting thousands of EU and Swiss firms from over-regulation
The Omnibus adjustments respond to the Draghi report on EU competitiveness. The analysis was brutal: European mid-market firms are suffocating under red tape while US and Chinese rivals scale. The Small Mid-Cap category is part of the counter-move—designed to stop growing firms from freezing investment or avoiding markets out of compliance fear.
For Switzerland, this is doubly relevant. First, because many Swiss firms fall precisely into this size bracket. Second, because Swiss SMEs are traditionally tightly woven into EU supply chains and markets. Anyone planning scalable AI deployment today must reassess the make-or-buy decision—especially as compliance requirements become predictable.
What You Should Do Now
- Check whether your company qualifies as a Small Mid-Cap (under 750 employees, under €150M revenue or €129M balance sheet).
- Inventory all AI applications producing or using output in the EU—including indirectly via partners or customers.
- Classify by risk tier: which systems fall under Annex III (high-risk)? Are you using general-purpose AI with systemic risk?
- Register early for sandbox access—capacity is limited, and you don't want to queue when your deadline looms.
- Use the simplified templates for technical documentation as soon as they are published. Don't waste time on custom developments that may be rejected.
If you are unsure where exactly your systems stand or how to set up proportionate quality processes, that is precisely where specialist support comes in. The Omnibus makes compliance manageable—but not trivial.
Beware False Security
Relief measures apply only to Small Mid-Caps AND only to specific processes (documentation, QM, sandboxes, fines). The substantive requirements for high-risk AI—transparency, data quality, human oversight—remain fully in force. You save effort, not responsibility.
Conclusion: Use the Window Before It Closes
The Small Mid-Cap category is a rare moment of regulatory sanity. It acknowledges that a 600-person company does not have the compliance capacity of a DAX-listed corporation—yet must still operate AI safely. For Swiss mid-market firms active or aiming internationally, this is a real opportunity: scaling and compliance no longer exclude each other.
But the window is time-limited. Deadlines are running, sandboxes have finite capacity, and authorities expect you to actively claim the relief measures—ignorance is no defence. If you set the course now, the AI Act becomes a competitive advantage rather than a brake.
Frequently asked questions
- What is a Small Mid-Cap under the EU AI Act?
- A company with fewer than 750 employees and annual revenue up to €150 million (or balance sheet up to €129 million). This category was newly created in the Digital Omnibus and sits between classic SMEs (<250 employees) and large enterprises.
- What concrete relief do Small Mid-Caps receive?
- Simplified technical documentation with mandatory-acceptance templates, proportionate quality management systems instead of full ISO requirements, priority free access to regulatory sandboxes, and reduced penalty caps for violations. Substantive high-risk requirements (transparency, data quality, human oversight) remain unchanged.
- Does the Small Mid-Cap relief apply to Swiss companies?
- Yes, if your AI systems produce output in the EU or are used there. Article 2(1)(c) of the AI Act has extraterritorial reach—even without an EU establishment. For export-oriented Swiss firms, the Act is binding and the Small Mid-Cap relief is available.
- When must my high-risk AI system be compliant?
- Standalone high-risk AI under Annex III by 2 December 2027; product-embedded systems by 2 August 2028. Use the time for sandbox testing and documentation build-up—last-minute remediation is expensive and risky.
- What does access to the regulatory sandbox cost?
- For SMEs and Small Mid-Caps, sandbox access is free under Article 58 of the AI Act. You bear only internal costs (staff time, possibly external advice) but no fees to the authority.
- Do the relief measures also reduce my liability for AI harm?
- No. The Small Mid-Cap relief lowers administrative burden and penalty caps but does not change civil liability or substantive safety and transparency duties. You remain fully responsible for the quality and safety of your AI.
Sources
- EU AI Act Update: Digital Omnibus Finalizes 8 Compliance Changes
- Simplified rules for small mid-cap companies - European Parliament
- EU AI Act: Proposed Digital Omnibus on AI Will Impact Businesses' AI Compliance Roadmaps
- Commission Recommendation on the definition of small mid-cap enterprises
- Article 58: Detailed Arrangements for AI Regulatory Sandboxes - EU AI Act
- Swiss SMEs ramp up adoption of AI in workplaces
- EU AI Act News 2026: New Deadlines & Business Impact
Would you like to explore this topic for your company?
Check Availability