Who we help

Organisations using AI

The AI Act applies to organisations that use AI, not only to those that build it. Some obligations already apply, including staff AI literacy and the ban on prohibited practices. We help you know what your teams use, decide what is allowed and keep the evidence.

The first conversation is free. Scope and price are confirmed in writing before work starts.

Discuss your AI use

Is this you?

  • Your teams use AI tools — chat assistants, copilots, translation, analytics — approved or not.
  • You buy software with AI features, or you build AI into your own product.
  • You use AI in decisions about people: recruitment, credit, insurance, education or access to services. These uses can be high-risk under the Act.

What the AI Act asks

AI literacy — already applies

Organisations that use AI must take measures so that their staff have sufficient AI literacy (Art. 4, from 2 February 2025).

Prohibited practices — already apply

Certain uses are banned, for example manipulative techniques, social scoring and some biometric uses (Art. 5, from 2 February 2025). Fines reach €35 million or 7% of worldwide turnover.

High-risk use

Obligations for high-risk systems apply from 2 December 2027 (Annex III uses) and 2 August 2028 (regulated products, Annex I): human oversight, logging, data quality, and for deployers using them in public services, an assessment of the impact on fundamental rights.

Data and confidentiality

What staff paste into AI tools is a GDPR and confidentiality question as much as an AI Act one — rules on data, approval and output review belong together.

How we help

StepWhat you receivePrice
AI use and governance reviewAn inventory of how AI is used, a risk register and acceptable-use and approval rulesfrom €5 900
AI use policyA policy people can follow: allowed tools, data, approval, review of outputsby quotation
Analysis of staff AI useWhy teams use unapproved tools, feeding rules that will actually be followedby quotation
External expert rolesA named specialist who keeps the inventory, rules and literacy evidence currentfrom €1 400 / month

Read more

Boundaries

  • We are not a certification body and do not issue legal opinions; legal questions are commissioned separately from a lawyer.
  • We do not act as a statutory EU representative (under GDPR, NIS2 or the AI Act) — that is a separate legal role.
  • Responsibility for decisions and reporting stays with the organisation’s management.

Discuss your AI use

EU law first, national law where it applies. EU regulations such as DORA, the AI Act and the GDPR apply directly in every Member State. Directives such as NIS2 are transposed into national law, so scope details, authorities, reporting channels and deadlines depend on the Member State where you are established or operate. Examples on this site often use Bulgarian law; in each engagement we confirm the national law that applies to you and involve local counsel where needed.