Yes, if your product reaches EU users. The EU AI Act, Cyber Resilience Act, DORA, the revised Product Liability Directive, the Data Act, and the Digital Services Act all apply based on where your product is used — not where your company is incorporated. UK, US, Canadian, Swiss, Indian, Israeli, and Ukrainian companies with EU users are in scope on the same terms as EU-established businesses. The scoping call confirms which frameworks reach your specific product.

It depends on what your product does, how it connects, who uses it, and in what context. Most commercial AI and software products are subject to at least two or three EU frameworks simultaneously. A product compliance assessment establishes which ones reach your specific product — ruling each framework in or out with legal reasoning — so you are not paying for coverage of laws that do not apply to you.

If you are a non-EU provider of a high-risk AI system or GPAI model placing it on the EU market, yes — under Article 22 of the EU AI Act, before your first EU customer. Other EU product regulations including MDR and the Machinery Regulation impose separate AR obligations. The scoping call confirms whether and which AR appointments apply to your product.

The €1,250 EU Product Compliance Assessment maps obligations under each applicable framework for one system. The €4,950 Cross-Regime Compliance Strategy adds a cross-framework conflict map — showing where frameworks interact, where one piece of evidence satisfies multiple obligations, and where two regimes pull in opposite directions — and covers up to three systems. The scoping call confirms which is the right fit before any commitment.

Each pack is a set of professionally built templates covering a specific EU regulatory framework — EU AI Act, Cyber Resilience Act, Data Act, DORA, or CE marking. They are structured around the regulation’s own document architecture, include plain-language completion guides, and are formatted the way a regulator, notified body, or market surveillance authority expects to see them. They are for teams with internal legal or compliance resource who need the right structure, not for teams that need a lawyer to make the legal determinations. Every pack includes a free entry document — a scope or applicability assessment — available without purchase.

Five working days from completed intake for the single-framework assessment, ten working days for the cross-regime assessment. A short intake form follows payment — fifteen to twenty minutes to complete. We review it within one working day and confirm scope before work begins.

The audit-ready compliance record produced by every assessment — structured by framework and product development stage, formatted so a regulator, notified body, investor, or acquirer can open it and find what they need. Designed to be updated as your product develops rather than replaced at each compliance review.

Every assessment is a legal determination made by a qualified EU regulatory lawyer — not generic information or a tool output. Documentation packs are drafts for legal review, structured so a lawyer can approve them efficiently. Neither service constitutes legal representation in enforcement proceedings or covers matters outside the defined scope of the engagement.