One engine. Multiple European regulations.

What you actually get

An AI compliance engagement with us produces concrete artefacts — not abstract advice. Most engagements deliver some combination of the following, scoped to your regulation set:

• AI System Inventory — every AI system in your organisation, including third-party tools, with owner, data source, and dependency map. Most of this is produced automatically from your repositories and infrastructure.
• Risk classification — each system mapped against the regulatory tier (e.g. Annex III for the AI Act), with documented reasoning auditors can read.
• Annex IV technical documentation pack — the nine-chapter EU AI Act requirement, delivered as a modular Markdown/Word/JSON set you can keep updating.
• Article 4 AI literacy program — 4-tier curriculum (all staff · power users · technical · leadership), LMS-ready content, documented assessment.
• Conformity declaration + evidence room — the legal output: a signed declaration plus an audit-ready evidence archive.
• Gap analysis & remediation roadmap — current vs required, ordered by risk and cost.
• ComplianceLint subscription — ongoing automated checking as your AI estate evolves.

Powered by our own product

ComplianceLint is our compliance scanner. It started as an EU AI Act tool and is becoming a multi-regulation platform — one engine, many regulations. The Profiling Wizard scopes which obligations apply, Human Gates capture judgement-grade attestations, and the AI Observation flow surfaces disagreement between AI-derived and human-derived answers. Because we own the codebase, we can extend it to your industry-specific framework if you need.

Our infrastructure posture

ComplianceLint runs on Hetzner Cloud (Falkenstein/Nuremberg, Germany) under their TÜV Rheinland-audited TOMs, BSI C5:2020 Type 2 attestation, and DPA. Customer data is encrypted at the application layer (envelope encryption of evidence blobs). We do not retain customer source code — only structured compliance answers + audit-trail metadata sync to the dashboard. The scanner itself runs entirely in your IDE.

Where to start

Most compliance engagements start with the AI Governance package or, for organisations not yet sure where they stand, the AI Readiness Assessment which includes a focused EU AI Act and GDPR review.

If your only concern is the EU AI Act specifically, we have a dedicated EU AI Act Consulting page with three productised offerings targeting that regulation alone.