If your team uses AI, the EU AI Act may apply to you.

Penalties under the Act’s enforcement regime (Art. 99(4)) run up to €15 million or 3% of global annual turnover — and for SMEs, whichever of the two is lower. The more immediate risk for most SMEs is simpler: if a regulator or a client asks for your documentation and you can’t produce it, you’re exposed.

Ask an LLM the same question twice and it interprets your information differently each time. Compliance evidence has to be consistent and reproducible — which is why we generate every document from a fixed, structured rule set. The same inputs always produce the same output, and when something in your pack changes, it’s because something in your business changed. Inconsistent documents are the first thing an auditor pulls on.

Then there’s the volume. It isn’t one document — it’s a usage policy, a register of every AI tool you use, staff records, a training matrix and a risk classification, all of which have to agree with each other. A template can’t tell you what applies to you.

You’ll receive a high-risk assessment report that sets out exactly why you fall into the category and which of your AI systems are responsible. It also breaks down what an auditor would want to see to validate your compliance, so you know precisely where you stand. Much of that evidence can come from the providers of the AI tools you use, and the assessment itself already produces some of the documentation you’ll need, even at high-risk level. Being flagged doesn’t leave you stuck — you’ll know exactly what applies to you and what to pull together next. That said, high-risk classification carries heavier, more complex obligations, and for those we’d always recommend pairing our documentation with specialist legal advice rather than relying on the platform alone.

Very little. Our assessment asks for: your business name and country; which AI tools your team uses (e.g. ChatGPT, Copilot, Canva AI); what those tools are used for; the names and roles of staff who use AI; and who is responsible for compliance at your organisation. The whole assessment takes under 10 minutes and your compliance documents are generated automatically from your answers.

Yes. The EU AI Act applies to businesses outside the EU where AI system outputs are used by people in the EU — including customers, employees, or users. This is established directly in Article 2(1)(c) of the regulation, and applies regardless of where your business is based.

Our documents are built to the requirements of the EU AI Act and structured in line with EU AI Office guidance. They give your business a clear, documented and consistent compliance position — the kind of evidence a regulator would expect to see. For businesses using high-risk AI under Annex III, or for any situation involving legal complexity, we recommend complementing our platform with specialist legal advice.

You can. Your documents remain what they are on the day you generate them — but they only stay accurate for as long as nothing changes.

And things change constantly. Staff join and leave. New AI tools get adopted, often without anyone announcing it. The rules themselves keep moving. The risk isn’t that your pack expires — it’s that it quietly stops matching your business, and nobody notices until someone asks for it.

Your subscription is what closes that gap: regulatory update alerts, and the ability to update your answers and regenerate your compliance documentation in minutes. Without it, keeping a set of interlocking documents accurate — and knowing when the rules have changed — becomes an ongoing job someone in your business has to own.

The following are official European Union resources on the EU AI Act and the AI Office:

• EU AI Act — Full legislative text (EUR-Lex)
• EU AI Office — European Commission
• AI Act regulatory framework — European Commission