Skip to main content

Free anonymised sample pack

EU AI Act and GDPR sample documents — see exactly what a GeraCompliance sprint produces

Seven anonymised sample documents showing the structure of every fixed-scope sprint deliverable: Annex IV technical documentation, EU AI Act risk classification memo, GDPR DPIA starter, supplier questionnaire response, 30-day action plan, and more. Free, no email gate, no signup.

What is in this sample pack

Free, no signup. Every PDF downloads directly from this page. We do not gate samples behind an email form.

Anonymised throughout. Every sample uses a fictional company (Acme Decisions Ltd) and a fictional AI system (AcmeMatch). No real customer data appears.

Excerpts, not full deliverables. Each sample is page 1-3 of a longer real artefact produced under a paid Sprint Agreement. The Documentation Sprint (£5,500) produces six of them in full.

Self-contained PDFs. 50-70 KB each, A4, no remote fonts or assets — they render identically on the prospect's device, including offline.

Not legal advice. These samples illustrate structure and rigour. Your team or qualified counsel must review and adapt anything before relying on it. The full disclaimer travels at the foot of every PDF.

Download the seven samples

Each PDF is signed with the GeraCompliance header, the geracompliance.com URL, the not-legal-advice footer, and page numbering.

  • Annex IV Technical Documentation Skeleton

    A 9-section skeleton matching Annex IV of the EU AI Act, populated with the structure a high-risk AI provider would actually file.

    Send when a prospect asks "we need Annex IV technical documentation" or is preparing for a notified-body conformity assessment.

    Annex IV technical-documentation skeleton (Sprint Agreement §4.2 — Documentation Sprint).

  • EU AI Act Risk Classification Memo

    A worked classification memo placing one AI system into the EU AI Act risk tiers with the reasoning and evidence trail an SME compliance reviewer expects.

    Send when a prospect says "we don't know our risk category" or is mid-way through a buyer or board questionnaire.

    EU AI Act risk classification memo (Sprint Agreement §4.1 — Readiness Sprint).

  • Risk-Management Register and Controls Map

    A risk register and control map structured per Article 9 of the EU AI Act, with risk IDs, owner-ready next steps, and a controls inventory.

    Send when a prospect asks "what does an AI risk register actually look like" or has been asked for one by an enterprise buyer.

    Risk-management register and controls map (Sprint Agreement §4.2 — Documentation Sprint).

  • Human Oversight and Transparency Checklist

    A practical checklist covering the human-oversight (Article 14) and transparency (Article 13) duties for a high-risk AI system, with implementation notes.

    Send when a prospect needs to evidence Article 13/14 compliance for a deployer review or enterprise procurement.

    Human-oversight and transparency checklist (Sprint Agreement §4.2 — Documentation Sprint).

  • GDPR DPIA Starter Pack

    A Data Protection Impact Assessment starter, including the lawful-basis analysis, ROPA stub, and proportionality reasoning a UK GDPR DPO would expect.

    Send when a prospect's DPO has asked for a DPIA or the AI workflow processes personal data at material scale.

    GDPR lawful-basis, ROPA, and DPIA starter pack (Sprint Agreement §4.2 — Documentation Sprint).

  • Supplier Questionnaire Response Pack

    Pre-prepared answers to the AI-supplier questionnaire that EU enterprise buyers send with their procurement pack — written in the voice a buyer's vendor-risk team can paste into their decision file.

    Send when a prospect is mid-procurement with an EU enterprise buyer and has been handed an AI-supplier questionnaire.

    Supplier questionnaire response pack (Sprint Agreement §4.2 — Documentation Sprint).

  • 30-Day Compliance Action Plan

    A week-by-week 30-day action plan to take a UK SME from "we know we have AI exposure" to "we have the evidence pack for the next buyer review".

    Send when a prospect is anchored on the 2 August 2026 milestone and asks "what should we actually do in the next 30 days".

    30-day compliance action plan (Sprint Agreement §4.1 — Readiness Sprint).

Request a tailored sample

Tell us your email, which sample matches your situation, and one sentence on your AI workflow. We respond within two business days with a one-off pack mapped to your context. Free, no commitment.

Frequently asked

Are these sample documents free to download?
Yes. All seven samples are free, anonymised excerpts of the deliverables we produce in a paid GeraCompliance sprint. Download any of them directly without an email signup.
Are the samples real customer documents?
No. Every sample uses a fictional customer (Acme Decisions Ltd) and a fictional AI system (AcmeMatch). Names, dates, and operational detail are illustrative. Real customer artefacts are confidential.
Can I use these samples as the final compliance documents for my company?
No. The samples show the structure, voice, and rigour of a GeraCompliance deliverable. They are not legal advice and do not guarantee compliance. Your team or qualified counsel must adapt them to your AI workflow and review them before relying on them.
Can I get a sample tailored to my company before booking a sprint?
Yes. Use the "Request a tailored sample" form on this page. Tell us your AI workflow, the buyer pressure, and which sample matches it, and we will send a one-off pack within two business days.
How do these samples relate to the £2,500 to £10,000 fixed-scope sprints?
Each sample is page 1-3 of a longer real deliverable from a paid sprint. The Documentation Sprint (£5,500) produces six of these artefacts in full. The Audit Pack Sprint (£10,000) adds the multi-system inventory, conformity-assessment preparation, and post-market monitoring workflow on top.

Ready for the full pack?

The Documentation Sprint (£5,500, 10 business days) produces the full versions of these samples mapped to your AI workflow. The Audit Pack Sprint (£10,000, 15 business days) adds multi-system inventory, conformity-assessment preparation, and executive risk briefing.