EU AI ACT · NIS2 · EVIDENCE AUTOMATION

Compliance evidence for EU-facing AI and SaaS vendors — at a fixed price

Pass enterprise due diligence and security reviews faster. We automate the evidence EU-facing AI and SaaS vendors need to answer security and AI questionnaires (CAIQ, SIG, investor due diligence) and to document EU AI Act and NIS2 compliance. Fixed price, fixed delivery time — every claim cross-checked against the text of the regulation. HR-tech is one of the verticals we serve.

REGULATORY STATUS · JULY 2026

2 August 2026 is still the applicable law. The Digital Omnibus was adopted by the European Parliament on 16 June 2026 and by the Council on 29 June 2026. It postpones the Annex III high-risk obligations to 2 December 2027, but it has not yet been published in the Official Journal and therefore has not entered into force. Until it does, 2 August 2026 binds.

HR-tech: one high-risk vertical under Annex III

Take HR-tech as one example: AI systems for recruitment, selection, evaluation and monitoring of employees are high-risk under the EU AI Act. That means concrete obligations for both providers and deployers:

Risk management & data governance

A documented risk-management system and training-data quality under Articles 9–10.

Transparency & human oversight

Clear information and meaningful human oversight under Articles 13–14.

Logging & registration

Automatic logging and registration in the EU database under Articles 12 and 49.

WHAT WE DELIVER

Evidence packs that hold up to scrutiny

Source-referenced to the regulation

Every claim in the deliverable is linked to the exact article of the EU AI Act — no loose interpretations.

Verifiably signed

Deliverables are signed with Ed25519 so authenticity can be checked by a third party.

Fixed price, fixed delivery

You know the cost and the delivery date before we start. No open-ended hourly rates.

Built for auditors and DPOs

Structured so an auditor, CISO or DPO quickly finds the evidence they need.

Modules

Start with the assessment, then add evidence packs and ongoing monitoring as you need them.

Module 1

AI inventory & Article 4 register

A complete inventory of your AI systems and an AI-literacy register under Article 4. Fixed price, fast delivery.

€1,499 Fixed price · fixed delivery
Module 2

Procurement Evidence Pack

Deployer evidence under Article 26 — the documentation you need for procurement and vendor review.

€3,499 Fixed price · fixed delivery
Ongoing

Compliance monitoring

Monthly monitoring of regulatory change and updated evidence as your systems and the requirements evolve.

from €699/mo Fixed price · fixed delivery

All prices are fixed and exclude VAT. Module 3 (enterprise scale) — contact us for a quote.

How it works

01

Assessment

We review your AI systems and map which are in scope and which obligations apply.

02

Evidence pack

You receive a source-referenced, signed evidence pack at a fixed price and delivery time.

03

Ongoing

We monitor regulatory changes and update the evidence so it stays current.

TRUST

Built for scrutiny — and for security

  • Every claim source-referenced to the text of the EU regulation
  • Ed25519-signed, verifiable deliverables
  • Aligned with ISO/IEC 27001 and ISO/IEC 42001
  • GDPR, DPA and sub-processor list available

ANCHORED IN EU SUPERVISION

The EU AI Act is enforced by national market-surveillance authorities in each member state, coordinated through the European AI Office and the AI Board. We build the evidence to meet these authorities' expectations across jurisdictions.

Operating in the Nordics or the Netherlands? We maintain localised guidance for each market — see the language versions below.

Frequently asked questions

When do the rules apply?+

2 August 2026 is still the applicable law. The Digital Omnibus — adopted by the Parliament on 16 June 2026 and the Council on 29 June 2026 — postpones the Annex III high-risk obligations to 2 December 2027, but it awaits publication in the Official Journal and has not yet entered into force. We plan for both dates.

Is our HR system high-risk?+

AI for recruitment, selection, evaluation and monitoring of employees is high-risk under Annex III. We determine together, in the assessment, exactly what is in scope.

What do we actually get?+

A source-referenced and signed evidence pack at a fixed price and delivery time, structured for auditors, CISOs and DPOs.

Does this cover NIS2 too?+

NIS2 is a separate directive transposed into national law. We deliver NIS2 evidence in its own track, independent of the AI Act timeline.

SELF-SERVICE · BUY DIRECTLY

Scan — continuous compliance online

Get started immediately — fixed price, no sales pipeline.

SCAN

Scan

Continuous monitoring of EU AI Act and NIS2 — automatic updates when regulations change.

€19/moExcl. VAT · cancel any timeStart Scan — €19/mo →
SCAN PRO

Scan Pro

Everything in Scan plus a public Trust Center page and a human-reviewed, signed evidence file every quarter.

€49/moExcl. VAT · cancel any timeStart Scan Pro — €49/mo →
QUESTIONNAIRE ANSWER

Questionnaire Answer

Received a security or AI questionnaire? We answer it for you — complete, source-referenced, signed.

€649Fixed price · excl. VATBuy Questionnaire Answer — €649 →

Ready to start?

Received an AI questionnaire from a customer, DPO or investor? Attach the file and email it to us — we reply within one working day with a fixed quote and delivery plan.