For US companies serving the European market
Transparency obligations apply from 2 August 2026. High-risk obligations follow on 2 December 2027, deferred by the EU's Digital Omnibus. We tell you which of your systems each one covers, close the gaps, and build the logging that proves it.
Not sure yet? Take the two-minute scope self-check
Plenty of firms will explain the Act to you. Fewer can answer the question an enforcement inquiry actually opens with: show us what this system did, when, and who oversaw it.
For conventional software, application logs cover that. For agents — tool calls, retrieved context, state carried across turns — they do not. The step that explains a decision is the step standard logging throws away.
We work both halves: the regulatory judgment that sets what you owe, and the instrumentation that produces the record.
The pathway
1.0
If your model’s output reaches users in the EU, you are likely in scope — whatever your incorporation or hosting region says. We establish that per system, in writing.
2.0
Your tier decides your obligations. Get it wrong and you either over-build for a minimal-risk feature or under-build for a high-risk one. Both are expensive.
3.0
Against the duties that actually attach to your tier — not a maturity model. The output is one register your engineers and your lawyers both understand.
4.0
Most programmes stall here, because the work splits across teams that share no vocabulary. We hold both halves rather than handing you a report and leaving.
5.0
Logging and post-market monitoring are continuous duties, and standard application logs do not satisfy them for agents. The high-risk deferral to December 2027 is time to build this properly — not time to ignore it.
Engagements
Are you in scope, for which systems, at what tier, and where are you short? Delivers an inventory, classification with rationale, a gap register, and a roadmap.
Execution against that roadmap: documentation, quality management, human oversight, data governance, incident reporting, conformity readiness.
Traceability for multi-turn agents, automated post-market monitoring, continuous evaluation — built into your stack, not described in a slide.
VPs of Engineering, Heads of AI, Chief Risk Officers and General Counsel at mid-market and enterprise US companies — SaaS, FinTech, HealthTech, HR Tech — shipping AI into Europe.
Also market-entry advisors and law firms placing clients in the EU. If you need a defined, low-risk first step to recommend, the assessment is built for exactly that.
Fifteen minutes, no preparation. We will tell you whether you are in scope — including when the answer is no.