AI Act Implementation for Businesses

We help businesses design and implement AI Act compliance frameworks. We structure legal obligations, create procedures, establish accountability within the organization, and prepare companies for regulatory inspections, conformity assessments, and the operational use of AI.

The AI Act does not have to be a barrier to innovation. We build legal and organizational AI Act compliance systems for companies developing or deploying AI solutions.

Simply identifying that a company uses AI does not solve the problem. It is necessary to determine the company's role within the AI value chain, identify applicable obligations, establish compliance documentation processes, define human oversight requirements, incident management procedures, data governance principles, and integrate new AI-related obligations into existing compliance structures.

Regulatory Assessment and Scope of Obligations

This typically includes:

• AI system classification
• Determining the organization's role within the AI value chain
• Identifying obligations arising from the AI Act
• Identifying areas dependent on future implementing regulations

Possible outcomes:

• AI classification report
• AI Act obligations matrix

Compliance Governance Framework Design

In practice, this may include:

• Risk management framework
• Human oversight structure
• Data governance procedures
• Post-market monitoring procedures
• Serious incident management procedures
• Internal accountability framework
• Significant modification assessment procedures
• Integration of AI Act requirements with existing compliance frameworks, including GDPR and NIS2
• Evidence and documentation management procedures

Possible outcomes:

• Compliance policies and procedures package
• Compliance workflow framework
• Governance documentation for management boards

Preparing the Organization for Conformity Assessment

This stage focuses on transforming compliance assumptions into operational readiness.

It may include:

• Documentation reviews against evidentiary requirements
• Evidence management framework design
• Preparation of conformity declaration processes
• Regulatory inspection readiness

Possible outcomes:

• Regulatory readiness report
• Compliance documentation model
• CE accountability matrix

Ongoing Regulatory Support

This maintenance phase may include:

• Monitoring and analysis of new European Commission guidance
• Updating procedures and policies
• Incident classification support
• Assessment of model changes
• Assistance in communications with supervisory authorities
• Ongoing advisory support for management boards and CTOs

Who We Help

This service is designed particularly for companies that:

• Develop AI systems
• Build products containing AI components
• Use AI within operational processes
• Are preparing for a more formalized compliance model
• Need to clarify responsibilities across management, legal, product, IT, and security teams
• Want to manage AI-related risks effectively

This service is intended for organizations seeking practical implementation rather than a general legal opinion.

Our AI Act Implementation Process

1. Project Assessment

We determine which AI systems are being used or developed, who is responsible for them, and how they operate in practice.

2. Regulatory Qualification

We identify which legal requirements apply and determine the actual scope of compliance obligations.

3. Governance Framework Development

We create procedures, accountability matrices, oversight mechanisms, and documentation workflows.

4. Operational Compliance Preparation

We organize evidence, workflows, compliance records, and incident response procedures.

5. Ongoing Compliance Maintenance

We update procedures as new guidance is issued and organizational changes occur.

Implementation Outcomes

Clients receive more than a legal interpretation of the regulations. They receive an operational compliance framework, including:

• A map of regulatory obligations
• A package of policies and procedures
• Clearly defined internal responsibilities
• Incident and model change management procedures
• Structured compliance documentation
• Preparation for conformity assessments and regulatory inspections

Scope of Our Services

Our law firm provides legal and regulatory support. We do not perform technical implementation.

Our services do not include:

• Designing or modifying AI models
• Creating or validating datasets
• Implementing logging systems
• Technical testing of accuracy, robustness, or cybersecurity
• Engineering documentation
• ISO/QMS implementation
• Source code audits
• Penetration testing or resilience testing
• Certification by notified bodies
• Acting as an internal compliance officer
• Responsibility for the technical operation of AI systems

FAQ

Is the AI Act already in force?

Yes. The AI Act entered into force on August 1, 2024, but its provisions apply gradually. Certain obligations became applicable on February 2, 2025, additional obligations apply from August 2, 2025, and the main body of the regulation becomes fully applicable on August 2, 2026, subject to specific exceptions for certain high-risk systems.

Does every company using AI require a full AI Act implementation?

Not necessarily. The first step is to determine the organization's role, the type of AI system involved, and how AI is used internally or externally. Only then can the scope of obligations be properly assessed.

Does the implementation also cover GDPR and NIS2?

Yes, where required by the project.

Does the law firm implement technical solutions?

No. Our services focus on legal and regulatory support. Technical implementation and IT deployment remain the responsibility of the organization and its technology teams.

Do you provide support after implementation?

Yes. We can provide ongoing regulatory support, including policy updates, guidance analysis, incident classification, and continuous advisory services for management boards and CTOs.

AI Act Compliance Begins with Proper Qualification and Ends with Organizational Readiness

We guide organizations through the entire process—from identifying obligations and building governance structures to creating procedures and preparing the company for operational compliance.

‍