Implement · fixed scope and a clear end state
Implementation
Projects
Deliver the controls, technical evidence and engineering changes required before the next customer review, regulated pilot or launch. If the necessary outcome is already clear, the project can be scoped directly without buying a review first.
EU AI Act timelines now split by category. Transparency obligations have applied since 2 August 2026; systems already on the market before then have until 2 December 2026 for the marking and detection duties. High-risk rules apply from 2 December 2027 for the listed high-risk areas (Annex III) and from 2 August 2028 for AI built into regulated products.
Last reviewed 17 September 2026 · European Commission AI Act Service Desk
Common project outcomes
Privacy and access controls
Data minimisation, role-based access, retention logic, processor boundaries, and audit-ready implementation details built into the system.
DPIA-ready documentation
Practical documentation for high-risk processing activities, written with enough technical detail for legal, product, and engineering teams.
EU AI Act readiness work
Classification support, technical documentation mapping, data governance controls, and engineering tasks for AI systems deployed in or sold into the EU.
Security and NIS2-oriented controls
Incident response, supply chain risk, operational security, and implementation tasks that reduce avoidable compliance exposure.
Digital health and clinical software support
Engineering support around IEC 62304 software lifecycle concerns, MDR technical documentation, clinical data pipelines, and privacy-aware workflows.
How it runs: this is a bounded implementation project, not ongoing technical leadership. We agree a defined set of controls, documentation and engineering changes at the start; I deliver them with your team, then close with verification and a written record of what was completed. Typical engagement: 4 to 8 weeks.
Pricing
Focused implementation
From €2,500
One defined outcome, normally delivered in around one week—for example a data map and DPIA input pack, or one control taken through implementation and verification.
Larger implementation
Fixed quote
Several connected controls, evidence deliverables or engineering changes, typically delivered over 4 to 8 weeks.
The fixed fee is agreed before work begins and depends on the deliverables, deadline, access required and implementation responsibility.
Best for
- +Healthtech, AI, and research-led teams that process personal, sensitive, or regulated data
- +Teams processing EU personal data or deploying AI systems in the EU
- +Companies preparing for customer, funder, investor, or regulatory scrutiny
- +Digital health teams building clinical or care-adjacent software
Not the right fit if
- •Companies needing purely legal advice (I'm an engineer, not a lawyer. I work with your legal team)
- •Organizations looking for checkbox compliance that won't survive an audit
- •Businesses with zero engineering capacity to implement changes
Have a defined deadline or deliverable? Email first, or talk through the implementation scope.