AI that is ready
for the EU AI Act.

In phases, and the phases changed in 2026. Prohibited practices have applied since February 2, 2025 and general-purpose AI model obligations since August 2, 2025. Article 50 transparency became enforceable on August 2, 2026: AI disclosure, deepfake labelling, and machine-readable marking of synthetic content. The high-risk control set did not land then. The Digital AI Omnibus, in force since July 27, 2026, moved standalone Annex III high-risk obligations to December 2, 2027 and product-embedded Annex I systems to August 2, 2028. So transparency is a now problem and high-risk is a 2027 problem.

Neither - I am a senior engineer who builds the technical controls the Act requires. I implement the logging, transparency, human-oversight, data-governance, and evaluation machinery so your system can be compliant, and I work alongside your legal counsel or DPO who owns the legal interpretation and sign-off. You need both. I am the build half.

Yes. Using a third-party model does not exempt you - you are the deployer, and obligations like transparency, human oversight, record-keeping, and risk management land on you. The model provider handles their share (GPAI obligations); you handle deployment. I make sure the deployment side is built correctly.

High-risk systems (think recruiting, credit, biometric, critical infrastructure, certain medical or education uses) carry the heaviest requirements: risk management, data governance, technical documentation, automatic logging, human oversight, accuracy and robustness testing, and post-market monitoring. I build these in from the start rather than retrofitting, which is far cheaper than bolting them on after launch.

Article 50 requires that users are told when they are interacting with an AI system, and that AI-generated content is marked. For chatbots and generative features this is a small, concrete build task - clear disclosure, machine-readable content marking - that I handle as part of the integration.

It depends on whether your system is high-risk and how much exists already, and you get a fixed price in writing within three days of a free 30-minute call, before any work starts. A transparency, content-marking and logging pass on an existing feature takes 1-3 weeks; human oversight, an eval harness and data-governance controls take 3-6 weeks; a full high-risk control set with documentation and monitoring takes 6-10 weeks.