High-risk AI obligations apply: August 2, 2026

Your AI system has the code.
Where's the compliance evidence?

The EU AI Act doesn't just ask for documentation — it demands proof. We go into your codebase, ML pipelines, and monitoring systems to extract and structure the evidence your compliance documentation requires.

Why Templates Won't Save You

9
evidence areas

Annex IV requires proof across system architecture, training data, accuracy metrics, human oversight, cybersecurity, and more.

Evidence
lives in code

Bias testing logs, model versioning, data lineage — the proof is buried in your engineering systems, not in a Word doc.

Templates
can't extract it

Anyone can generate an Annex IV template with ChatGPT. But no AI tool can log into your MLflow, trace your data lineage, or verify your monitoring pipeline.

What We Do

We extract compliance evidence from your engineering systems and package it into audit-ready documentation.

Start here

Evidence Gap Assessment

We map your AI system against the 9 Annex IV evidence areas and identify exactly what proof you have, what's missing, and where to find it in your codebase. You get a prioritized action plan your engineering team can execute.

€2,500 – €6,000
1 week
Full engagement

Evidence Dossier

We work hands-on with your engineering team — reviewing Git history, ML experiment logs, CI/CD pipelines, and monitoring dashboards — to extract and structure the evidence your compliance documentation requires. Scoped after assessment.

Scoped after assessment
2–4 weeks typical
Ongoing

Evidence Maintenance

Your AI system evolves — your compliance evidence must keep up. Quarterly reviews of model updates, retraining events, and system changes to keep your documentation audit-ready.

Scoped after assessment
Ongoing retainer

How It Works

1

Evidence Scope Call

Fill out a short form. We review your AI system details and schedule a 15-minute call to confirm whether Annex IV applies and scope the engagement.

2

Evidence Gap Mapping

We map your system's existing evidence — from code repos to experiment tracking — against all 9 Annex IV requirements. You'll know exactly what you have and what's missing.

3

Evidence Extraction & Packaging

We work with your engineers to extract proof from your actual systems and compile it into structured, audit-ready documentation your legal team can review.

Is Your AI System High-Risk?

Under Annex III of the EU AI Act, AI systems in these sectors require full technical documentation:

Biometrics & facial recognition
Critical infrastructure (energy, transport, water)
Education & vocational training
Employment & HR automation
Credit scoring & insurance
Law enforcement & justice
Migration & border control
Election & democratic processes

What an Evidence Assessment Looks Like

A Berlin-based HR-tech company had AI-powered candidate screening but no structured compliance evidence. We mapped their system against all 9 Annex IV areas, identified 4 critical gaps, and delivered a remediation roadmap — saving their engineering team an estimated 80+ hours.

Download Case Study (PDF)

About

EU AI Ready is based in Berlin. We combine 4+ years of hands-on regulatory compliance engineering (GDPR, ePrivacy, consent management) with deep technical fluency. We don't just read the regulation — we read your code. That's why we can extract compliance evidence faster than a law firm and more accurately than a template.

Connect on LinkedIn

Frequently Asked Questions

Are you a law firm?+
No. We are technical compliance engineers, not lawyers. We extract evidence from your engineering systems and package it into structured documentation. Your legal team reviews and signs off.
Can't we just generate documents with AI?+
You can generate templates — but that's not what regulators want. They want evidence tied to your actual system: bias test results from your pipeline, model version history from your repo, data lineage from your training process. ChatGPT can't log into your MLflow.
Why wouldn't we just do this ourselves?+
You could. But your engineers would need to read the full regulation, figure out what evidence maps to what requirement, and then hunt it down across your systems. That's typically 90+ hours of senior engineering time. We've already built the evidence map — we just need access to your systems to populate it.
How do you access our codebase?+
We work under NDA with controlled access — read-only repo access, screen sharing sessions, or guided evidence extraction where your team pulls the data using our structured checklist. We never need admin access or credentials to production systems.
What if our system isn't high-risk?+
That's what the initial assessment is for. If your system turns out to be minimal or limited risk, we'll tell you — and you'll have a clear report to show your legal team.
Do you provide a compliance certificate?+
No. Only notified bodies can issue compliance certificates. We provide the technical evidence documentation (Annex IV) that you need for the conformity assessment process.
Why not just have a law firm handle this?+
Law firms charge €300+/hour but still need your engineers to explain the system architecture, training data pipeline, and model behavior. That back-and-forth alone costs €6,000+ before any document is written. We speak both languages — engineering and regulatory — so we extract the right evidence faster and deliver artifacts your lawyers can review in hours, not weeks.

August 2026 is closer than you think.

High-risk AI obligations apply from August 2, 2026. Start with a quick assessment — find out if your system has the evidence it needs.

Check If This Applies to You