EU AI Act
The EU AI regulation is now applying in phases. We classify your systems, identify obligations and prepare the technical documentation.
Regulation (EU) 2024/1689
- What is at stake
- Up to €35M or 7% of global turnover
Who it applies to
- Providers of high-risk AI systems
- Companies using AI in HR, credit or insurance
- General-purpose model developers
Typical timeline
3 to 6 months
Regulation (EU) 2024/1689
In detail
The world’s first comprehensive AI law.
Regulation (EU) 2024/1689, known as the AI Act, classifies AI systems by risk level: prohibited practices, high risk, transparency risk and minimal risk. The higher the risk, the more obligations.
It applies in stages: prohibited practices and the AI literacy duty have applied since February 2025, general-purpose model rules since August 2025, and most high-risk obligations from August 2026, subject to possible timeline adjustments by the Commission.
High-risk systems (for example in recruitment, credit, education or critical infrastructure) need risk management, data governance, technical documentation, logging, human oversight and cybersecurity.
Real scenarios
Questions we answer.
Is my system high risk?
We classify each use case against Annex III and the Article 6 exceptions, and document the decision.
I deploy, I don’t build
Deployers also have duties: human oversight, logs, informing workers and, in some cases, a fundamental rights impact assessment.
Chatbots and generated content
Transparency duties require telling people they are interacting with AI and marking synthetic content.
What you get
What you will have at the end.
- AI system inventory and classification
- Obligations analysis by role
- AI risk management system
- Required technical documentation
- Cybersecurity and robustness controls
- AI literacy programme
How we engage
Three ways to approach it.
Gap analysis
Know exactly what is missing.
- 2 to 3 weeks
- Prioritised report
- Fixed quote
- Most chosen
Full implementation
We take you to the audit.
- Policies and controls
- Evidence prepared
- Audit support
Maintenance
Stay compliant year after year.
- Annual internal audit
- Change tracking
- Support with the auditor
AI Act
What we focus on
- 01
Risk-level classification
- 02
Prohibited practices
- 03
Technical documentation and logs
- 04
Robustness and cybersecurity testing
EU AI Act
How we work
- 1
Diagnosis
Gap analysis against the framework, prioritised by risk.
- 2
Plan
A roadmap with owners, budget and schedule.
- 3
Implementation
Policies, technical controls and evidence, with your team.
- 4
Audit
Internal pre-audit and support in front of the auditor.
FAQ
Frequently asked questions
How much does preparing for EU AI Act cost?
It depends on scope and starting point. After the first call we give you a fixed quote, no surprises.
Can I combine it with other frameworks?
Yes. We reuse shared controls so each additional certification costs far less.
Does it affect non-EU companies?
Yes, if their AI systems are placed on the market or used in the EU, or if their output is used in the EU.
How does it relate to ISO 42001?
ISO 42001 is a voluntary management standard; the AI Act is law. Implementing the standard covers much of the regulation’s organisational duties.
Services
Next step
Shall we talk about your case?
30 minutes with a partner, not a salesperson. No commitment.