Agentic Identity· 17 September 2026

AI Act Article 50: transparency for AI agents in SMEs

Article 50 of the AI Act: roles, transparency notices and the limits of an agent digital ID. A signed credential is not the same thing as regulatory compliance.

A rule book and a notice about interacting with an AI system.

Article 50 of the AI Act sets transparency obligations for certain artificial intelligence systems and uses. A digital ID for an agent can provide checkable information about the issuer and the declared scope, but the regulation does not require that technology and it does not turn a credential into automatic proof of compliance.

The useful question for an SME is what role it plays, what the system does and what information reaches the person interacting with it. The commercial label "agent" does not on its own determine the obligation.

Provider and deployer: different obligations

Article 50(1) is addressed to providers of systems intended to interact directly with people: they must design and develop them so that the person knows they are interacting with AI, except in the cases and exceptions set out. The article also contains separate obligations on marking synthetic content, emotion recognition, biometric categorisation and certain publications or manipulated content. They should not be mixed up.

An SME using a third-party product has to identify its specific role and review how the notices are implemented. If it modifies or places a system on the market, its analysis may change. The official source for Article 50 lets you check the applicable text and its notes; the Commission published transparency guidelines in July 2026. General application of these obligations began on 2 August 2026, with the scope and exceptions set out in the regulation.

The notice and the credential do complementary jobs

A visible notice communicates that this is AI. A signed credential makes it possible to check a declaration by the issuer. A buried link or a QR that nobody opens does not guarantee that the person received the required information.

MeasureWhat it contributesLimit
A clear notice at the first interaction, where applicableDirect, understandable informationHas to be reviewed in every channel
Signed credentialOrigin and integrity of the declared identity and scopeDoes not authenticate the sender on its own
Log of versions and noticesEvidence of what was shown and whenRequires retention and suitable controls
Permissions and approval in connectorsOperational enforcement of limitsHas to be tested in each integration
Legal review of the caseDetermination of applicable obligationsA badge does not replace it

A concrete plan for companies

  1. Inventory the systems that interact with customers, employees or suppliers.
  2. Identify the company's role and the real uses, including external channels.
  3. Check that the notice appears clearly and in good time where it applies.
  4. Assign a responsible person and a human contact channel.
  5. Version the declarations, the notices and the authorisations.
  6. Test scope changes, access withdrawal and incident management.

The company's name and registry code, the permission list and the validity period are good governance pieces. Not all of them are literal requirements of Article 50 in every case.

What NEXTAI contributes

Our digital ID for AI agents publishes a signed declaration about our own agents. The Argos verifier shows the checks on that credential. It is a verifiable self-declaration, not an official attestation and not an external conformity assessment.

The review also has to cover effective permissions. Level A4 on our internal scale does not grant forbidden actions and it is not a legal category under the AI Act.

Frequently asked questions

Is a cryptographic ID mandatory for every agent?

No. Article 50 does not impose this format or any particular seal.

Is a QR enough to inform people that this is AI?

It cannot be assumed to be enough. The notice has to meet the conditions applicable to the case; the credential is a complementary resource.

Does a verifiable identity avoid a fine?

No. Enforcement depends on facts, roles and obligations, not on holding an image or a signed document.

To assess a specific case, get in touch with NEXTAI. We start with the inventory and the missing evidence; any specialist legal analysis is scoped separately.

Ready to apply this to your business?

Eva helps you choose. Our team scopes your project.

Book an audit · €290 ↗