AI Playbook EU — the essentials
GDPR, EU AI Act, readiness check, reference to our legal partner.
By 2 August 2026 high-risk systems must be documented audit-proof. We assess your AI readiness, classify every use case and deliver the Annex IV documentation — from live mandates in insurance and the public sector.
From 2 August 2026, high-risk AI systems must be documented audit-proof under the EU AI Act. Without a clean risk classification and Annex IV documentation by then, you risk fines and market access. An AI readiness check shows today where you stand and what is missing.
We combine AI compliance and GDPR in one mandate: risk tiering per use case, a completed Annex IV file, an operating model for ongoing documentation, and facilitated audit dry runs. From live mandates in insurance and the public sector — not a theoretical framework.
What you concretely get
AI readiness check and EU AI Act compliance in one mandate: risk tiering, Annex IV documentation, GDPR conformity and audit prep. Governance is the entry ticket, not an add-on.
Data check & readiness: where your data stands, which silos slow you down, what traceable AI needs.
EU AI Act classification per use case (limited · high · prohibited) — the basis of any audit prep.
Risk-management file per Annex IV — fully completed, ready to present for audit.
Operating model: who documents what, when, with which sign-off — GDPR- and EDPB-compliant.
Audit prep plus facilitated dry runs with compliance, IT and the business.
Approach
Three phases, clear outputs. You see every step — and can exit after any one of them.
Capture all AI systems and prioritize by EU AI Act risk class. Hidden use cases included.
Fill templates, close gaps, reviews with compliance, legal and engineering. We write with you.
Integrate documentation into ongoing development — the next model version documents itself.
Pricing & Models
Every engagement is scoped individually based on scope, maturity level, and time horizon. We work project-based with fixed price, day-rate-based with transparent rates (junior to senior), or on a retainer model.
Fixed price per phase with a defined definition of done. Preferred for clearly scoped engagements.
Rates tiered by seniority level — Junior, Mid, Senior, Principal. Transparent billing.
Fixed monthly hour budget. Useful for operate phases or fractional lead mandates.
Further reading
GDPR, EU AI Act, readiness check, reference to our legal partner.
How formal models make compliance verifiable — GDPR and EU AI Act.
99 articles, readiness check, industry templates for regulated sectors.
Intro call
At the end: a clear recommendation — or a reason why a different path fits better.