Fixed-scope paid offer
EU AI Act and GDPR readiness sprint for AI teams that need evidence now
A practical fixed-price engagement for UK and EU-facing SMEs preparing for buyer diligence, board review, or the 2 August 2026 AI Act milestone. We classify the AI workflow, map GDPR issues, produce a focused evidence pack, and leave you with a 30-day action plan.
What the sprint is, in one paragraph
The GeraCompliance AI Act and GDPR readiness sprint is a fixed-scope, fixed-fee engagement for UK and EU-facing SMEs that classifies your AI workflow under the EU AI Act, triages GDPR data flows and DPIA triggers, and produces an evidence pack and 30-day action plan ready for buyer diligence, board review, or the 2 August 2026 AI Act milestone. Three tiers are available: Readiness Sprint at GBP 2,500 over 5 business days, Documentation Sprint at GBP 5,500 over 10 business days (the most-chosen tier for SMEs facing enterprise buyer questionnaires), and Audit Pack Sprint at GBP 10,000 over 15 business days for teams selling high-stakes AI into the UK or EU. All tiers are billed via Stripe at a single fixed fee; sprint output is structured compliance evidence and templates, not legal advice or a notified-body conformity assessment.
- Price range
- GBP 2,500 - 10,000 fixed fee
- Timeline
- 5 to 15 business days per tier
- Buyer
- UK and EU-facing SME AI teams
Readiness Sprint
A fast evidence-backed scope check for one AI product or workflow.
Founders who need to know what obligations apply before committing to a larger programme.
- AI system inventory for one product or workflow
- EU AI Act risk classification memo
- GDPR AI data-flow and DPIA triage notes
- 30-day compliance action plan
- 60-minute review call with written next steps
Documentation Sprint
The practical documentation pack most UK SMEs need before buyer or board review.
SMEs selling AI features to regulated buyers or preparing diligence evidence.
- Everything in Readiness Sprint
- Annex IV technical-documentation skeleton
- Risk-management register and controls map
- Human-oversight and transparency checklist
- GDPR lawful-basis, ROPA, and DPIA starter pack
- Supplier questionnaire answers for EU enterprise buyers
Audit Pack Sprint
A board-ready evidence pack for teams selling high-stakes AI into the UK or EU.
Leadership teams with multiple AI systems, investor diligence, or urgent enterprise buyer review.
- Everything in Documentation Sprint
- Multi-system inventory for up to three AI systems
- Conformity-assessment preparation checklist
- Post-market monitoring and incident workflow
- Executive risk briefing for leadership or investors
- Two working sessions for legal, product, and engineering owners
What is included
- EU AI Act risk classification memo
- GDPR AI data-flow and DPIA triage
- Risk register with owner-ready next steps
- Documentation pack sized to the selected tier
- Plain-English review call and written follow-up
What is not included
- Legal advice or law-firm sign-off
- Notified-body conformity assessment
- A guarantee of regulatory compliance
- Custom software development or platform promises
- Unlimited revision cycles outside the fixed scope
How the sprint runs
Scope lock
We confirm the AI workflow, data categories, vendors, intended market, and the evidence you already have.
Classification and GDPR triage
We map the AI Act role and risk tier, then document personal-data flows, lawful-basis questions, DPIA triggers, and buyer-facing gaps.
Evidence pack and review
You receive the sprint deliverables for the selected tier, a prioritised action plan, and a working session to walk through next steps.
Book a sprint
Request a fixed-scope AI Act/GDPR sprint
Captured as a sales lead so the team can invoice and follow up.
Sprint FAQ
Are the fixed-scope sprints legal advice?
No. The sprints produce structured compliance evidence, templates, and implementation guidance for your team. They are designed to speed up legal, product, and engineering review, but final advice and sign-off must come from your qualified counsel.
What do we need to provide before the sprint starts?
We ask for a short product description, AI workflow summary, data categories, vendor list, existing privacy materials, and any buyer questionnaires or diligence requests you already have.
Which sprint should a UK SME choose first?
Most SMEs should start with the Documentation Sprint because it includes the practical evidence buyers usually request: risk register, AI Act classification memo, GDPR data-flow notes, and supplier questionnaire answers.
Can the sprint guarantee EU AI Act or GDPR compliance?
No. It is a fixed-scope readiness and documentation engagement, not a notified-body assessment, law-firm opinion, or regulator guarantee. It helps you identify gaps and assemble evidence for qualified review.