EU AI Act consulting
Know what applies. Fix what matters. Prove you’ve done it.
Practical EU AI Act support for organisations using, buying or building AI. We identify the obligations that apply, put the right controls and evidence in place, and give your team a clear route forward.
EU AI Act services
Start with the problem you need to solve
Three focused engagements covering the most common EU AI Act priorities we see today.
Article 50 Transparency Sprint
We determine which Article 50 requirements apply to one defined AI product or service, fix the transparency gaps and compile the evidence showing what you’ve done.
EU AI Act Baseline
We inventory your AI systems, determine your role and risk category, map the obligations that apply and turn the result into a prioritised compliance roadmap.
AI Literacy Programme Design & Delivery
We turn Article 4 into a practical programme for your organisation, identifying who needs to know what, designing role-based learning and helping you deliver and evidence it.
Not sure where to start?
Leave with something you can actually use
Our engagements produce working artefacts your leadership team, customers and governance teams can use, not a 70-page report that disappears into SharePoint.
Illustrative Baseline extract
| AI system | Role | Classification | Requirement | Priority |
|---|---|---|---|---|
| Customer support chatbot | Deployer | Transparency | Article 50 | Now |
| CV screening tool | Deployer | High-risk | Annex III requirements | Prepare |
| Marketing image generator | Provider | Transparency | Generated-content requirements | Now |
One row per AI system. One defensible view of role, risk, obligations, evidence, actions and ownership.
The regulatory position
What matters now
The EU AI Act is being applied in stages. You do not need to solve every future requirement today, but some areas already require attention and others need preparation.
Transparency
Article 50 requirements are a current priority for relevant human-facing and synthetic-content AI.
AI literacy
Organisations deploying AI need proportionate measures to support AI literacy.
High-risk systems
Organisations with potentially high-risk AI should use the runway to establish classification, evidence and controls before the later high-risk requirements apply.
Need the full dates, risk categories and legal detail? Read the EU AI Act guide →
Implement & sustain
Need help beyond the initial engagement?
EU AI Act Implementation Programme
For organisations that have identified material EU AI Act obligations and now need to implement the governance, documentation, processes and controls behind them.
- Risk and governance processes
- Technical and compliance documentation
- Human oversight and monitoring
- Evidence and implementation support
Fractional AI Governance Lead
Ongoing AI governance capability without immediately hiring a permanent lead.
- Governance board support
- AI register and classification maintenance
- Incident and escalation process
- Regulatory and assurance support
How we work
From uncertainty to working controls
Understand
We establish how your organisation actually uses AI and which obligations attach.
Build
We create the controls, artefacts, training and remediation required.
Evidence
We leave you with a defensible record of what was assessed, decided and implemented.
EU AI Act + ISO 42001
Already working toward ISO 42001?
Good AI management gives you a strong foundation, but ISO 42001 certification and EU AI Act compliance are not the same thing.
We map the management system, controls and evidence you already have to the EU AI Act requirements that actually apply, so you build on existing work instead of duplicating it.
Questions
Does the EU AI Act apply to UK companies? +
Often, yes. The Act reaches providers established outside the EU that place AI systems or models on the EU market, and providers and deployers outside the EU where the system’s output is used in the EU. Brexit does not automatically place you outside it. Separately, EU customers increasingly build AI governance into supplier assurance, so procurement questionnaires can apply pressure even where direct legal scope is unclear.
What should we do first? +
Get a clear view of what actually applies to you. The free Exposure Check gives an initial read in a few minutes. For a defensible picture, the EU AI Act Baseline inventories your systems, sets your role and risk category, maps the obligations and returns a prioritised roadmap with owners and actions. From there the priorities usually pick themselves.
Does our chatbot need an Article 50 disclosure? +
If it interacts directly with people, yes. Article 50 requires that people are told they are interacting with an AI system unless it is obvious, and this applied from 2 August 2026 with no grace period. The wording and placement of that disclosure is worth getting right. Our Transparency Sprint pins down exactly which Article 50 duties attach to a given product and puts the evidence in place.
What does Article 4 AI literacy actually require us to do? +
It requires you to take measures to support the development of AI literacy among the people who use or are affected by your AI, proportionate to the systems you operate. You are not required to guarantee a set level, but the duty is binding on every deployer and is under supervision. In practice the question is whether your measures are proportionate and evidenced, which is what our AI Literacy Programme delivers.
When should we start preparing for high-risk AI requirements? +
Now, if any of your systems may be high-risk. The obligations for standalone Annex III systems apply from 2 December 2027, and for AI embedded in regulated products from 2 August 2028. That runway is there to be used: confirm classification, then build the documentation, controls and evidence over time rather than in a rush near the deadline.
Does ISO 42001 make us compliant with the EU AI Act? +
No. ISO 42001 certifies your AI management system; the EU AI Act regulates AI systems as products. ISO 42001 is an international management standard, not a harmonised European one, so it carries no presumption of conformity under the Act. It is genuinely complementary, a strong foundation you can build on, and we map the management system and evidence you already have to the requirements that actually apply.
EU AI Act consulting
Start with what actually applies to you.
Run the free Exposure Check for an initial view, or talk to us about your systems and we’ll help you choose the right starting point.