Fixed-scope EU AI Act & GDPR sprint — engagement summary

GeraCompliance · A Gera Systems product · support@gera.services

Parties

Provider: Gera Services Ltd (United Kingdom), trading as GeraCompliance.
Customer: the organisation named on the order, invoice, or sprint request form.

Services & fixed fees

The Customer selects one of the following fixed-scope tiers. Fees are in GBP, exclusive of VAT where applicable.

• Readiness Sprint — £2,500 (5 business days): AI system inventory, EU AI Act risk classification memo, GDPR AI data-flow and DPIA triage notes, 30-day action plan, review call.
• Documentation Sprint — £5,000 (10 business days): includes Readiness deliverables plus Annex IV technical-documentation skeleton, risk-management register, human-oversight and transparency checklist, GDPR lawful-basis/ROPA/DPIA starter pack, supplier questionnaire answers.
• Audit Pack Sprint — £10,000 (15 business days): includes Documentation Sprint deliverables plus multi-system inventory (up to three AI systems), conformity-assessment preparation checklist, post-market monitoring workflow, executive risk briefing, two working sessions.

Payment

Unless otherwise agreed in writing, the fixed fee is due before work commences, typically via Stripe Payment Link or invoice. Travel, legal review by Customer’s counsel, and out-of-scope changes are not included.

Scope & reliance

Deliverables are structured compliance evidence, templates, and implementation guidance to accelerate Customer’s own review. They are not legal advice, a notified-body conformity assessment, or a guarantee of regulatory compliance. Customer is responsible for operational implementation and for external reliance after qualified review.

Intellectual property & confidentiality

Customer retains ownership of its materials. Provider retains ownership of methodology and reusable templates; Customer receives a licence to use deliverables for its internal compliance and buyer-diligence purposes subject to the full order terms. Each party protects the other’s confidential information using reasonable care.

Limitation of liability

To the maximum extent permitted by law, Provider’s aggregate liability arising from a sprint is capped at the fees paid for that sprint, and neither party is liable for indirect or consequential loss. Nothing in this summary excludes liability that cannot be excluded by law.

Governing law

Unless otherwise agreed in a signed order form, the parties use English law and the courts of England and Wales.