AI Act Position & Roadmap
Where you stand,
and what 2027 asks.
An inventory of the AI you already use, classified. What the transparency obligations mean for the systems running now, and what the high-risk deadline of 2 December 2027 changes for you. Delivered as the first phase of a programme rather than a report that ends.
The problem
You cannot classify what nobody has written down.
Almost every organisation underestimates how much AI is already inside it, because most of it arrived as a feature of something else. A vendor added a summarisation button. A team started using an assistant. None of that went through a procurement process that would have recorded it.
The obligations attach to systems, so the first honest step is a list. Everything after that, classification, transparency, documentation, is comparatively mechanical. The reason organisations stall is that they try to start at the legal analysis rather than at the inventory.
What you get
A classification inventory
The AI in use across the business, listed and classified, including the parts that arrived as a feature of something you bought for another reason.
A documented position
What applies to you today, what applies later, and where you have judged something to be out of scope, with the reasoning recorded.
The transitional question
Whether anything you deployed earlier sits inside the transitional window, which changes what you have to do and by when.
The 2027 view
What the high-risk deadline of 2 December 2027 changes for the systems you actually run, rather than in general.
A working session
To walk it through with the people who own the systems and the people who own the risk, who are rarely the same people.
How it runs
Three weeks, remote, and built to become the first phase of the readiness programme if you want it to.
Find it all
Interviews, contracts and system lists, because a good half of what qualifies was never described as AI when it was bought.
Classify
Each system against the Act's categories, with the reasoning written down so a successor can follow it.
Position
What that means in practice, what is already required, and what changes at the deadlines that apply to you.
Hand over
A session with system owners and risk owners together, and documentation written to be maintained rather than filed.
What sits behind it
No AI Act engagement is published here yet. The regulated delivery behind it is.
- Prima PolisAI running inside a Dutch insurance intermediary under financial regulation, with the documentation that has to survive scrutiny.
- Tata Steel, GRC in ServiceNowMapping how data actually moved across an enterprise before a governance, risk and compliance platform was built on top of it. The same discipline an inventory needs.
What it costs
EUR 18,500
Fixed fee, three weeks, remote
Fixed, and the first phase of something longer.
Three weeks at a fixed price. It is designed to be the opening phase of the readiness programme rather than a report that ends, because a classification is only true on the day it is written and your systems keep changing.
You can stop here and many do. What you keep is an inventory and a position you can maintain yourself.
Fit
For organisations where getting it wrong is expensive.
Financial services, insurance, legal, healthcare and the public sector, where an AI decision carries consequences beyond the project and where a regulator may eventually ask.
If you are earlier than that and mostly want to know whether any of this applies, the briefing costs a tenth as much and answers that question honestly.
Common questions
- Is this legal advice?
- No. I advise on implementation, documentation and literacy. Where interpretation is genuinely contested, that is a question for counsel and I will say so rather than resolve it for you.
- What if we find something non-compliant?
- Then you know, which is the point, and you will have found it before someone else did. The position records what to do about it and in what order.
- How is this different from the briefing?
- The briefing orients a leadership team in half a day. This produces a defensible inventory and a written position you could put in front of a regulator.
- Does it include the literacy obligation?
- It covers what Article 4 requires of you. The rolling literacy sessions themselves sit in the readiness programme, or in the AI literacy programme for smaller companies.
The right starting point when you already know the Act applies and need to say exactly how.
Start a conversation