Direct answer: RAIGF™ SMB Foundation delivers a complete EU AI Act compliance framework across five dimensions — proportional to SMEs between 10 and 500 employees, fully aligned with EU AI Act, GDPR, and NIS2, operational from week 4 onwards. No certification, no badge — a working governance layer your leadership owns.

Concrete deliverables across the 4-week implementation:

The five governance dimensions covered are: Strategic Alignment, Ethical Governance & Regulatory Alignment, Operational Control, Risk & Compliance Coverage, Sustainable Operations. Each addresses a category of risk that growing organizations consistently underestimate.

RAIGF™ SMB Foundation is part of the broader RAIGF™ AI Governance Framework — proportional, multi-level, designed for European organizations.

Want to see what the 4-week roadmap looks like for your context? Book a 45-minute governance consultation.

Direct answer: No. RAIGF™ SMB Foundation is a governance framework — not a certification, regulatory label, or legal audit. It structures your organization's AI governance posture across five dimensions (strategy, ethics, operations, compliance, sustainability) and is designed to be operational from day one, not to produce a badge.

What RAIGF™ SMB Foundation is:

• An operational governance architecture — installed in 4 weeks, owned by your leadership
• A 5-dimension framework — addressing the categories of AI risk that medium-sized organizations actually face
• Aligned with EU regulations — EU AI Act, GDPR, NIS2 mapped to your systems, not a generic checklist
• Proportional to your scale — no enterprise overhead, no SE simplification

What RAIGF™ SMB Foundation is not:

• A certification awarded after audit
• A regulatory label or compliance stamp
• A legal opinion on specific obligations
• A static document delivered once and forgotten

The relationship to compliance is complementary: regulations define what must be achieved; RAIGF™ provides the governance architecture that makes achievement defensible. When auditors arrive, you have documented accountability mechanisms. When B2B clients request governance evidence, you have it.

Need governance that works in audit and procurement contexts? Book a 45-minute consultation.

Direct answer: RAIGF™ SE is built for organizations under 10 employees with no dedicated governance function. RAIGF™ SMB Foundation is built for organizations between 10 and 500 employees, where governance must coordinate across multiple roles, systems, and regulatory obligations. Same framework architecture, different operational depth.

The principle is consistent across both: governance must be proportional. A 5-person organization doesn't need cross-functional documentation. A 250-person organization can't operate with a single-page accountability statement. RAIGF™ SE delivers the right depth for small enterprises; RAIGF™ SMB Foundation delivers the right depth for medium-sized organizations with multiple AI systems in production.

If your organization is currently under 10 employees but expects to grow past that threshold within 12 months, we typically recommend starting with SE and migrating to SMB Foundation when scale and AI footprint require it. The architecture supports continuous evolution without rework.

For complete level positioning across all five RAIGF™ tiers, see the RAIGF™ AI Governance Framework overview.

Not sure which level fits? Book a 45-minute level assessment.

Direct answer: Foundation establishes governance from scratch — the right starting point if your organization does not yet have a formal AI governance layer. Advanced is for organizations that already have governance practices in place and want to deepen, extend, and mature them — typically because AI has become embedded in core operations.

If you are unsure which applies, the free consultation will clarify it in the first 15 minutes. The goal is to identify the right starting point — not to push you toward the more expensive option. If your governance maturity, regulatory exposure, or AI footprint genuinely calls for RAIGF™ SMB Advanced, we will tell you directly with a clear explanation of why.

Many organizations begin with Foundation and evolve to Advanced 12 to 24 months later, once governance is internalized and the next maturity step becomes relevant. The framework architecture supports that evolution without rework.

Not sure where you fit? Book a 45-minute level assessment.

Direct answer: RAIGF™ SMB Foundation maps your AI systems against EU AI Act risk classifications and structures your governance accordingly. It gives you a defensible EU AI Act compliance posture — but it is not a substitute for legal counsel on specific obligations. What it does guarantee: your organization stops operating blind in front of the regulation.

What RAIGF™ SMB Foundation does for EU AI Act compliance:

• System inventory and risk classification — every AI system mapped against the EU AI Act's four risk tiers (unacceptable, high, limited, minimal)
• Obligation mapping — each system's specific obligations identified and assigned to an owner
• Documentation infrastructure — the governance evidence the regulation expects
• Continuous monitoring — drift detection so newly deployed systems do not create unclassified exposure
• Cross-regulation alignment — GDPR and NIS2 obligations mapped alongside, since they overlap in practice

What it does not replace:

• Legal opinion on whether a specific AI use falls under high-risk classification
• Conformity assessment for high-risk AI systems (where applicable)
• Notification procedures with national supervisory authorities

For organizations that need broader compliance services beyond governance architecture — including EU AI Act audit preparation and compliance roadmap — see our complete AI Services portfolio.

The cost of governing late under EU AI Act enforcement is consistently higher than the cost of governing now. Fines reach 7% of revenue and include market withdrawal as a sanction.

Want EU AI Act mapped to your real systems? Book a 45-minute consultation.

Direct answer: Yes — and it is specifically designed for this situation. RAIGF™ SMB Foundation requires only that your organization has an existing IT function and a designated AI responsible. The framework is built to be operationally viable without a compliance team. That is precisely what distinguishes it from enterprise-grade alternatives.

What's required to implement:

• An IT function — internal team or external partner with operational visibility over AI systems
• A designated AI responsible — typically the IT director, COO, or CTO depending on organization structure
• Executive sponsorship — leadership commitment to operate the framework after handover

What's not required:

• A dedicated compliance officer or DPO (though many SMBs have one anyway)
• A legal department
• An internal audit function
• External regulatory consulting on retainer

The implementation methodology is designed for organizations that cannot dedicate one or more full-time roles to AI governance. RAIGF™ SMB Foundation distributes governance responsibility across existing functions — IT, executive leadership, business unit heads — without creating a new headcount requirement.

Enterprise-grade governance frameworks consistently fail in mid-sized organizations because they assume resources that don't exist. SMB Foundation starts from the opposite assumption: your existing team will operate this. The framework is shaped accordingly.

Want governance built for your real team? Book a 45-minute consultation.

Direct answer: Most AI governance frameworks for SMBs are built by regulatory consultants who have never deployed an AI workload in production. Virtualtek operates across the full AI stack — from hardware to runtime — and brings 15+ years of enterprise IT operational experience into every RAIGF™ SMB Foundation engagement. Governance recommendations are grounded in real production environments, not regulatory checklists.

What makes the Virtualtek implementation different:

• Same team handles infrastructure and governance — no handoff gap between architects and governance consultants
• Exclusive European distributor of RAIGF™ — the framework was designed with European regulatory context (EU AI Act, GDPR, NIS2) from day one, not adapted retroactively
• Operational reality, not academic theory — recommendations grounded in production environments, not slide decks
• Belgium and France direct presence — local engagement with EU regulatory context applied to your jurisdiction
• Vendor-agnostic governance — no commission incentive on tool recommendations, no hidden bias toward a specific AI provider
• No lock-in — documentation, processes, and roadmap are handed over and yours to operate; you can leave anytime

This integration matters because governance retrofitted onto unaware infrastructure is fragile. Governance designed alongside infrastructure understanding is durable. RAIGF™ SMB Foundation implementations survive audits, regulatory questions, and the test of daily operations because they are built into operational reality.

For organizations engaging Virtualtek for both AI infrastructure and AI services, RAIGF™ SMB Foundation becomes the unified governance layer across the full lifecycle — single point of accountability, single team, single contract.

Want governance grounded in real infrastructure expertise? Book a 45-minute call.

Direct answer: The right moment is before a regulatory request, a B2B due diligence questionnaire, or an AI-related incident forces it. Building governance proactively is dramatically cheaper than retrofitting under audit pressure — and the EU AI Act enforcement timeline is no longer theoretical.

Concrete triggers that mean "start now":

• You have at least one AI system in production with no formal governance structure around it
• You know the EU AI Act applies to your organization but have not mapped it to your actual systems
• AI decisions are being made across your organization without documented ownership or accountability
• You process personal or sensitive data through AI and cannot confirm GDPR obligations are covered
• An enterprise client has asked about your AI governance in a procurement questionnaire
• You are preparing to bid on a public tender where AI governance evidence may be evaluated

What changes between now and 12 months from now:

• EU AI Act enforcement is expanding — risk-based classification is being applied across high-risk categories
• GDPR oversight of AI-processed data is intensifying — fines reach 4% of revenue
• NIS2 transposition across EU member states adds operational resilience expectations
• B2B procurement increasingly requires documented AI governance evidence
• Your AI footprint will have grown — meaning more retrofit work later

Waiting is a decision with consequences. The cost of governing late is consistently higher than the cost of governing now — and the difference grows every quarter as regulatory enforcement matures and B2B governance expectations harden.

If your organization is approaching enterprise scale (500+ employees) or AI is becoming strategic infrastructure, see RAIGF™ Enterprise Foundation for the next maturity tier.

Ready to install governance before you need it? Book a 45-minute consultation.