EU AI Act readiness in six weeks
Illustrative example. Figures are representative targets, not a specific client claim.
Picture a fast-moving scale-up that has shipped AI into customer-facing features before anyone mapped the compliance picture: no inventory of what uses AI, no risk classification, no documentation — a board-level exposure under the EU AI Act, and a growing worry that fixing it would mean freezing the roadmap. This playbook is how we'd close that gap.
The real risk wasn't the technology
The systems themselves were fine. The exposure was that nobody could say, on paper, which features used AI, what data they touched, or what would happen if a model got something wrong, exactly the questions a regulator or enterprise customer asks first.
Left alone, that gap tends to surface at the worst possible moment: during due diligence, a security review, or an incident, when there's no time to assemble the answers.
What we'd build
We'd inventory every system that uses AI, classify each by risk under the EU AI Act, and write lightweight governance policy that fits how the team already works rather than bolting on heavy process.
The output is documentation and simple approval workflows that make the AI defensible, plus the human-oversight and logging measures the Act expects for higher-risk uses.
Governance that doesn't freeze delivery
The point is to make compliance a living part of how you ship, not a one-off audit binder. New AI features get classified and documented as part of the normal release process, so the inventory stays current instead of going stale the day it's written.
That means the product team keeps moving while the board and your enterprise buyers get the assurance they need, in a form you can hand to a regulator or a procurement team on request.
Results, and honest limits
A focused readiness engagement gets you from nothing to a defensible, documented framework in around six weeks, without stalling the roadmap.
We're an implementation partner, not a law firm: we do the inventory, classification, documentation, and workflows, and we'll flag where you should get formal legal sign-off rather than pretend to give legal advice.
A scale-up deploying AI in customer-facing products had no inventory, classification or documentation — a board-level risk.
We inventoried every AI system, classified risk under the EU AI Act, wrote lightweight governance policy and set up documentation and approval workflows.
A defensible, fully documented AI governance framework the board signed off on, without slowing the product team down.
Inventory
We map every feature and system that uses AI, the data it touches, and who owns it.
Classify
Each use is risk-classified under the EU AI Act so effort goes where the Act requires.
Document & policy
Lightweight policy, technical documentation, and human-oversight measures, fitted to your team.
Embed
Approval workflows make new AI features get classified and documented as part of normal releases.
- Start with an inventory: you can't govern AI you haven't mapped.
- Classify by risk so effort goes where the Act actually requires it.
- Aim for lightweight, living documentation that survives a fast roadmap.
- Governance can be an implementation project, not a delivery freeze.
Common questions
Do we have to comply with the EU AI Act?+
If you build or deploy AI systems used in the EU, most likely yes, at least the transparency and risk-management duties. We help you find out exactly which obligations apply to your specific systems rather than guessing.
Will this slow down our product team?+
No, that's the design goal. We embed classification and documentation into your normal release process so compliance keeps pace with shipping instead of blocking it.
Are you lawyers?+
No. We're an implementation partner: inventory, risk classification, documentation, and workflows. Where formal legal sign-off is needed, we'll say so and work alongside your counsel.
What do we actually walk away with?+
A current inventory of your AI systems, a risk classification for each, lightweight policy, technical documentation, and approval workflows, all owned by you and kept current by your own release process.
Not sure which applies to you?
Book a free assessment and we'll map the highest-ROI automation opportunities for your business, honestly, including when it's not worth starting yet.
Book a free AI assessment