A year ago, most conversations around AI were about what it can do.
Now, the conversation has shifted to what businesses are allowed to do with it and how governments plan to tax it.
That shift is happening fast
If you're using AI for content, automation, customer support, or even internal workflows, this isn't something you can ignore anymore. Regulation is coming in from one side, and tax authorities are starting to look at AI-driven revenue from the other.
And the tricky part is, none of it is fully settled yet.

Let's start with regulation
There's no global standard. The EU is moving ahead with a structured framework where AI systems are categorized based on risk. If your use case falls into a higher-risk category, the compliance requirements go up quickly. The US, on the other hand, is taking a more flexible route, leaning on existing laws and sector-specific rules.
In simple terms, what's fine in one market might raise flags in another.
That becomes a real issue if your business operates across borders or serves users globally. A single AI content pipeline could end up needing different disclosures, controls, or documentation depending on where your users are.
Now layer tax on top of that
This is where things get even less clear.
Governments are trying to figure out how to tax value created by AI. If your business is generating content using AI tools, and that content drives revenue, where exactly is that value being created? Is it where your company is registered, where your servers are, or where your users are?
There's no consistent answer yet but tax authorities are starting to ask the question more aggressively.
We're already seeing versions of this through digital services taxes and equalization levies. It wouldn't be surprising if AI-specific tax rules start showing up soon, especially for companies operating in multiple jurisdictions.
The risk here isn't just higher tax. It's overlapping tax.
Two countries might both claim the right to tax the same income, and unless your structure is thought through, you're left trying to fix it after the fact.
Then there's data, which sits quietly in the background but drives most of this.
AI systems rely on data, often pulled from different regions. Regulators are tightening how that data can be used, especially personal or sensitive data. But beyond privacy, there's a growing focus on how data contributes to economic value.
If data collected in one country is used to generate revenue elsewhere, that link is starting to matter more from a tax and compliance perspective.
Another area that's still messy is ownership
If AI generates content, who owns it? If that content is based on existing material, are there copyright issues? And if that content is monetized, how do you treat that income from a tax standpoint?
There aren't clean answers yet. Which means businesses need to be a bit more cautious than usual.
So what does this mean in practice?
You don't need to panic, but you do need visibility.
Most companies are already using AI in some form, but very few have mapped it properly. Where it's used, what data it touches, which markets it affects, how it ties back to revenue. Without that, it's hard to even see where the risks are.
It also means compliance can't be an afterthought anymore. Earlier, you could wait for rules to settle and then adjust. With AI, things are moving too quickly for that approach.
What's helping some businesses is bringing structure into how they handle cross-border compliance. That's where firms like Comply Globally come in, especially for companies operating in multiple countries. It's less about over-engineering things and more about making sure the basics are covered before regulators start asking questions.
AI is creating value in ways that don't fit neatly into old legal or tax frameworks. Governments are trying to catch up, but they're not doing it in sync.
Until that settles, businesses are operating in a bit of a grey zone.
Some will ignore it and deal with problems later. Others will start putting structure around it now and avoid the scramble when enforcement catches up.

