EU AI Act Triage Sprint
Classify your AI systems under Article 6 and Annex III, scope Article 50 transparency and deployer-side duties on any GPAI models in use, cross-map to NIST AI RMF, and hand your board a readiness memo against the August 2 2026 deadline.
2 weeks (1 sprint) or 4 weeks (Foundation-shape, 2 sprints) for multi-system estates
Who this is for
EU-HQ B2B SaaS, fintech, healthtech, and edtech companies with AI features in production or about to ship, facing the August 2 2026 deadline. Heads of AI, CTOs, and General Counsel who need engineering-grade classification and a board-ready readiness memo at a price below the Big-Four floor.
When you need it
The EU AI Act is in force. The Article 6 / Annex III high-risk obligations and the Article 50 transparency duties bind in full on August 2 2026. Big-Four firms are quoting €50K+; law firms are writing legal opinions on code they cannot read. You need engineering-grade classification, deployer-side duty mapping for any GPAI models in scope, a NIST AI RMF cross-walk, and a board-ready readiness memo in two weeks.
What's delivered
- AI-system inventory: every AI / agentic / GPAI surface the company ships or deploys, mapped to a system-of-record record
- Article 6 + Annex III walk-through per system: high-risk classification with the deciding evidence stated
- Article 50 transparency map: where consumer-facing disclosure is required and what your product needs to surface
- Deployer-side duty inventory for GPAI models in scope (Article 26 + the residual transparency duties), distinct from Chapter V provider duties which bound on 2 Aug 2025
- NIST AI RMF cross-walk: the same evidence pack serves both regimes so you do the work once
- Gap register with severity, owner, and fix-window, sequenced to the 2 August 2026 cliff
- Board-ready readiness memo: where you are, what binds when, what the next 90 days look like
Why this consultant
Co-author of the WARRANT Standard for autonomous agent authorisation - aligned with NIST AI RMF and the EU AI Act. Engineering-grade classification at the price point neither Big-Four practices nor specialist EU law firms can deliver, with deployer-side duty mapping that survives a hostile DPA reading.
What this sprint is not
- A legal opinion (this is engineering-grade classification; pair with your counsel)
- GPAI provider obligations under Chapter V (those are upstream provider duties that already bound on 2 Aug 2025; this sprint addresses deployer-side and Article 50 transparency duties on the 2 Aug 2026 cliff)
- Full remediation work (Sprint 05 AI Integration Strategy or Sprint 06 Compliance & DD Readiness pick up the architecture-level / regulator-facing remediation that follows classification)
Fixed price, fixed scope. Every engagement carries the four guarantees: Sprint 1 Escape Hatch, Board-Ready Quality, Three-Client Cap, Skin-in-the-Game Pledge.