Fixed-scope paid offer
EU AI Act and GDPR readiness sprint for AI teams that need evidence now
A practical fixed-price engagement for UK and EU-facing SMEs preparing for buyer diligence, board review, or the 2 August 2026 AI Act milestone. We classify the AI workflow, map GDPR issues, produce a focused evidence pack, and leave you with a 30-day action plan.
Readiness Sprint
A fast evidence-backed scope check for one AI product or workflow.
Founders who need to know what obligations apply before committing to a larger programme.
- AI system inventory for one product or workflow
- EU AI Act risk classification memo
- GDPR AI data-flow and DPIA triage notes
- 30-day compliance action plan
- 60-minute review call with written next steps
Documentation Sprint
The practical documentation pack most UK SMEs need before buyer or board review.
SMEs selling AI features to regulated buyers or preparing diligence evidence.
- Everything in Readiness Sprint
- Annex IV technical-documentation skeleton
- Risk-management register and controls map
- Human-oversight and transparency checklist
- GDPR lawful-basis, ROPA, and DPIA starter pack
- Supplier questionnaire answers for EU enterprise buyers
Audit Pack Sprint
A board-ready evidence pack for teams selling high-stakes AI into the UK or EU.
Leadership teams with multiple AI systems, investor diligence, or urgent enterprise buyer review.
- Everything in Documentation Sprint
- Multi-system inventory for up to three AI systems
- Conformity-assessment preparation checklist
- Post-market monitoring and incident workflow
- Executive risk briefing for leadership or investors
- Two working sessions for legal, product, and engineering owners
What is included
- EU AI Act risk classification memo
- GDPR AI data-flow and DPIA triage
- Risk register with owner-ready next steps
- Documentation pack sized to the selected tier
- Plain-English review call and written follow-up
What is not included
- Legal advice or law-firm sign-off
- Notified-body conformity assessment
- A guarantee of regulatory compliance
- Custom software development or platform promises
- Unlimited revision cycles outside the fixed scope
How the sprint runs
Scope lock
We confirm the AI workflow, data categories, vendors, intended market, and the evidence you already have.
Classification and GDPR triage
We map the AI Act role and risk tier, then document personal-data flows, lawful-basis questions, DPIA triggers, and buyer-facing gaps.
Evidence pack and review
You receive the sprint deliverables for the selected tier, a prioritised action plan, and a working session to walk through next steps.
Book a sprint
Request a fixed-scope AI Act/GDPR sprint
Captured as a sales lead so the team can invoice and follow up.
Sprint FAQ
Are the fixed-scope sprints legal advice?
No. The sprints produce structured compliance evidence, templates, and implementation guidance for your team. They are designed to speed up legal, product, and engineering review, but final advice and sign-off must come from your qualified counsel.
What do we need to provide before the sprint starts?
We ask for a short product description, AI workflow summary, data categories, vendor list, existing privacy materials, and any buyer questionnaires or diligence requests you already have.
Which sprint should a UK SME choose first?
Most SMEs should start with the Documentation Sprint because it includes the practical evidence buyers usually request: risk register, AI Act classification memo, GDPR data-flow notes, and supplier questionnaire answers.
Can the sprint guarantee EU AI Act or GDPR compliance?
No. It is a fixed-scope readiness and documentation engagement, not a notified-body assessment, law-firm opinion, or regulator guarantee. It helps you identify gaps and assemble evidence for qualified review.