In 2024, the regulatory and technological framework for French companies underwent profound changes. With the acceleration of artificial intelligence adoption, the gradual implementation of new European directives, and the reshaping of digital priorities, leaders are facing concrete trade-offs that impact their competitiveness over several years.
CSRD Sustainability Reporting: A Scale Change for European Companies
The CSRD (Corporate Sustainability Reporting Directive) replaces the old NFRD directive and multiplies the number of companies subject to non-financial reporting. The scope increases from about 11,700 entities in Europe under NFRD to nearly 50,000 under CSRD, with a phased implementation.
This extension is not limited to large listed groups. Mid-sized enterprises and some structured SMEs are gradually coming under the scope, which requires collecting environmental, social, and governance data according to harmonized European standards (ESRS). The volume of data to be produced and audited represents a significant organizational challenge, often underestimated by financial departments.
For companies that have never published a sustainability report, the leap is significant. The subject is no longer solely the responsibility of the CSR department: it involves accounting, procurement, IT, and sometimes the legal department. Following the news on Portail Entreprises helps to stay informed about deadlines and sector-specific obligations that become clearer quarter after quarter.
Adoption of Artificial Intelligence in France: Insee Figures and Size Effect
According to the ICT statistics published by Insee, the share of French companies with 10 or more employees using at least one AI technology rose from 6% to 10%, then to 18% between 2023 and 2025. This progression reflects a rapid acceleration that exceeds the linear growth observed in previous years.
The most striking data remains the gap according to size. Companies with 250 employees or more show an adoption rate of about 58%, compared to only 15% for those with 10 to 49 employees. This gap reflects differences in access to technical skills, investment budgets, and data culture.
Dominant Uses of AI in Business
Complementary surveys from Insee and specialized observatories show that French companies primarily use AI for three categories of tasks:
- Optimizing internal processes (automating repetitive tasks, managing logistics flows, processing documents)
- Reducing operational costs, particularly through predictive analytics applied to maintenance or inventory management
- Cybersecurity, with tools for anomaly detection and incident response that rely on machine learning
Deep transformations of business models remain rare. The majority of deployments aim for efficiency gains on existing processes, not a strategic overhaul. AI is primarily used to do better what the company is already doing, before enabling it to do things differently.
European AI Regulation (AI Act): Concrete Obligations Starting in 2025
The second major regulatory project for companies concerns the European AI Act, whose obligations will come into effect in phases between 2025 and 2027. This regulation classifies AI systems by risk levels and imposes proportional requirements.
For companies deploying or developing AI tools, this means documenting the algorithms used, ensuring transparency towards users, and establishing human oversight mechanisms for systems deemed high-risk (automated recruitment, credit scoring, surveillance).
Convergence of CSRD and AI Act for SMEs
The overlap of these two regulatory frameworks creates a specific constraint for SMEs and mid-sized enterprises. A company using AI to produce its CSRD reporting will simultaneously need to comply with the AI Act requirements regarding the traceability of its algorithms. The 2025-2027 deadlines require anticipating these two compliances in parallel, which implies legal and technical resources that many mid-sized structures have not yet mobilized.
Digital Maturity of French SMEs: An Uneven Catch-Up
Beyond AI, the digital transformation of small French businesses remains a fundamental issue. SMEs are generally better equipped than they were five years ago with basic tools (website, management software, cloud services), but their approach to advanced technologies remains cautious.
Cybersecurity illustrates this gap well. Large companies are investing heavily in protective measures, while smaller structures remain exposed due to lack of budget or internal skills. The use of specialized service providers is increasing, but cybersecurity remains the poor relation of the digital budget for SMEs.
Online commerce is another marker. While the share of companies selling online has increased, volumes remain concentrated among mid-sized players and large brands. For SMEs, online sales often represent a marginal complement rather than a strategic channel.
The underlying trends for companies in 2024 can be summarized as a dual pressure: technological with AI, regulatory with the CSRD and the AI Act. The maturity gap between large companies and small structures is not spontaneously narrowing. Leaders who have not yet mapped their regulatory obligations for 2025-2027 have a rapidly closing window for preparation.