EU AI Act compliance
A map of your AI systems, operational compliance, documented proof. And the real timeline — not the fear-mongers'.
The real timeline
Feb. 2025
Prohibited practices + your teams' AI literacy obligation (Art. 4).
Aug. 2025
Obligations for general-purpose AI models (GPAI).
2 Aug. 2026
Transparency (Art. 50): chatbots disclosed, generated content marked. Penalty regime activated (up to EUR 15M / 3% of turnover).
2 Dec. 2027
“High-risk” Annex III obligations (HR, credit, education…) — postponed by the Digital Omnibus.
Aug. 2028
Annex I (regulated products).
Postponing high-risk to December 2027 is not a cancellation. It's the window to do things properly.
Three situations
Support chatbots, AI-written newsletters, generated visuals: since 2 August 2026, each must be disclosed or marked — and penalties are active.
→ Transparency Flash Check: EUR 1,490, delivered in 1 week. Inventory of your AI touchpoints, gaps, concrete fixes, documented proof. Fully credited against the inventory.
AI-assisted recruitment is classified high-risk. Register, human oversight, candidate information: the obligations arrive on 2 December 2027. 17 months is the time it takes to do it well — not to wait.
→ AI inventory & exposure mapping: EUR 4,900. Full inventory (including the AI your teams use without telling you), risk classification, a dated 17-month plan, boardroom debrief. Then compliance implementation: EUR 14,900 (SME) / EUR 24,900 (mid-cap), inventory credited.
Without a usage policy, you combine GDPR exposure with non-compliance with the AI literacy obligation (Art. 4, in force since February 2025 — with documented proof required).
→ Usage policy + governed tooling (included in compliance implementation) + AI literacy sessions (see below).
The method
Diagnostic powered by our AI-audit agent platform — not a declarative questionnaire.
We implement (disclosures, marking, register, usage policy) — not a report that gathers dust.
Legal interpretation is carried out with our partner lawyers.
The ladder
Delivered in 1 week. Credited against the inventory.
Flash Check credited.
SME / mid-cap. Inventory credited.
Annual re-audit, register kept current, regulatory alerts — harmonised standards keep evolving through 2027.
Regulatory training
Article 4 of the EU AI Act has required, since February 2025, that your staff master the AI they use — and that you can prove it. And since the Digital Omnibus, nobody is sure what applies when: we also train your teams on the regulation itself, with the real timeline.
On-site sessions, certificate and documented proof included.
The regulation explained by the people who do the implementations.
FAQ
The timeline changed: the Digital Omnibus (adopted in June 2026) postpones the high-risk obligations to December 2027 (August 2028 for Annex I). Transparency and the penalty regime, however, have applied since 2 August 2026. That's exactly why you need someone who follows the text, not the rumours.
No, and that's deliberate: we do operational compliance — inventory, tooling, implementation, proof. Legal interpretation is carried out with our partner lawyers.
Yes: the AI literacy obligation (Art. 4) already applies, and without a usage policy you're exposed on GDPR. It's the most common case — and the quickest to fix.
Flash Check: about an hour of your time. Inventory: two to three thirty-minute interviews.
The regime has applied since 2 August 2026, up to EUR 15M or 3% of global turnover. As with GDPR, enforcement will ramp up gradually — getting compliant beforehand always costs less than after.