Service
AI Act Ready
“The AI Act applies to your systems, and nobody really knows where you stand.”
A clear view of your exposure to the AI Act and a technical action plan to reduce it.
Book a scoping callWho it is for
- CIOs, CISOs, risk and compliance functions
- Companies deploying or integrating AI systems
Deliverables
- Inventory of AI systems and uses
- Risk classification under the AI Act
- Gap analysis and prioritised remediation plan
- Security and governance recommendations
Format
A 3-to-4-week assessment, then support with implementation.
The context
The EU Artificial Intelligence Act entered into force in August 2024 and its obligations apply in stages since 2025. Some already apply, such as the ban on practices deemed unacceptable and the duty to build AI literacy among staff. The heaviest obligations concern so-called “high-risk” systems: following the adjustment adopted in 2026, they apply from 2 December 2027 for most uses, and from 2 August 2028 for AI embedded in regulated products.
Fines can reach €35 million or 7% of worldwide turnover for the most serious infringements.
My take: compliance is an engineering topic
Most AI Act requirements — traceability, technical documentation, risk management, data quality, human oversight, logging, cybersecurity — are architecture concepts. They are addressed in how systems are designed, not only in written policies.
The approach
- Inventory: systems built in-house, purchased solutions, undeclared uses.
- Qualification: your role (provider or deployer) and the risk level of each system.
- Gap analysis: what is missing, system by system.
- Remediation plan: technical and organisational measures, prioritised and sized in effort.
- Implementation (optional): supporting your teams all the way to compliance.
Security, the other half of the topic
AI systems open new attack surfaces: prompt injection, data leakage through models, data poisoning, dependency on third-party models. The assessment covers them, because a system that is compliant but vulnerable is not a system under control.
What I do not do
Legal analysis remains the job of your counsel. I bring the technical and architectural reading, and I am happy to work alongside your in-house lawyer or law firm.
Frequently asked questions
Do you replace a lawyer?
No. I bring the technical and architectural perspective; legal analysis remains with your counsel, whom I am happy to work with.