You will receive your systems classified and your compliance file in writing.
§ 1
Approach
We will classify each AI tool in your company and establish whether you act as provider or deployer, because your obligations depend on it.
We will separate what is already enforceable from what arrives in 2027, so that you invest in the right order.
We will draft the AI policy, the notices, the contracts with suppliers and the rest of the documents that support your position.
§ 2
Engagement
El importe exacto se cierra en la hoja de encargo antes de pagar, con los gastos previsibles incluidos. Si el encargo se alarga, no pagas más.
§ 3
Process
A unilateral confidentiality agreement signed by PASSAS before the video consultation, available at no additional cost on request. It binds the firm alone — no signature is required from the client — and adds an explicit contractual layer on top of the professional secrecy obligations inherent to the practice of law.
A 60-minute working session by video call in which we analyse your situation, your specific needs and our ability to help you. We assess whether we can take on the matter and give you the fixed price in advance. You can book it directly through the Google Calendar link on our website and pay €90 by Stripe.
Legal analysis of the business model that determines which rules affect the company, what legal risks exist and what documentation is mandatory before operating. Covers the sectoral regulatory framework, data protection obligations, essential contracts and any applicable authorisation or licensing requirements.
Legal analysis of the artificial intelligence systems the company operates or deploys under Regulation (EU) 2024/1689. Determines the company's regulatory role (provider, deployer or both), classifies each system according to the AI Act risk tiers and establishes the map of applicable obligations. The documentary basis on which any compliance process is built.
The documentation required for GDPR compliance and, more broadly, for any rules on data protection and on the processing and transfer of data, including international transfers, both in dealings with users and with the providers that process data on your behalf, with the legal mechanisms needed to operate without regulatory exposure.
The legal documentation required to operate online: legal notice, privacy policy, cookie policy and, where applicable, terms of sale. Drafted with legal precision and adapted to the specific activity, not carried over from another website. Complies with the GDPR and with information society services rules.
Public statement on the use of artificial intelligence in the company's products and processes: which systems are used, for what purpose and with what safeguards for the users affected. A deliverable that clients, regulators and investors will demand with increasing frequency, and that few firms are yet in a position to provide.
Contractual documentation to formalise relationships with clients and suppliers, with the terms, liabilities and scope clearly defined from the first engagement. Includes the services agreement adapted to the company's operations, with limitation of liability clauses and payment terms, ready to sign.
§ 4
Team
I see legal practice as a discipline of precision. I work where the law meets technology and cross-border operations, and I read code and contracts with the same attention. Before accepting an engagement I tell you whether it is worth pursuing and what it costs, at a fixed price.
I work where economic law meets technology: litigation, contracts and artificial intelligence systems. I am drawn to the ground where the rules are still being written, and I have brought that same rigour to litigation since my first year in practice.
§ 5
Questions
Only in part. Regulation (EU) 2026/1744 entered into force on 27 July 2026 and pushed back much of the high-risk regime, to 2 December 2027 for Annex III systems and 2 August 2028 for Annex I. It did not move 2 August 2026, which remains the date of general application and of enforceability for the transparency obligations in article 50. A company using AI today is already within scope.
The distinction decides which obligations apply, and it does not always match commercial intuition. Under article 25 a deployer becomes a provider by putting its own name or trade mark on a system, by modifying it substantially, or by changing its intended purpose. Companies that consider themselves users of third party AI frequently discover they have crossed into the provider role. Establishing your position is the first stage of the engagement.
Classification under the AI Act is a question of legal interpretation, and the answer determines exposure to fines. A consultancy can map processes and produce a report; it cannot sign a legal opinion, it carries no professional liability for the classification, and it is not bound by legal professional privilege. Everything we deliver is signed by lawyers admitted to the Bar.
From €5,000 + VAT, delivered within three weeks, at a fixed price agreed in the engagement letter. It covers classification of your systems, the compliance register, the contractual layer, your digital presence and the AI Statement.
With the AI Act Assessment. In seven days you will know what the Regulation requires of you and receive an adaptation proposal.
Yes. The AI Act self-assessment takes two minutes to run through the twelve questions we use to classify a case. It tells you whether your gaps are foundational, whether a scoped engagement will close them or whether you need no lawyer at all. It is free, requires no sign-up and stores nothing.
Then the work required is broader and is handled under our AI That Decides About People engagement, which establishes whether the system can be used and with what safeguards. Classification comes first in any event, and the Virtual Consultation for €90 (VAT included) is usually enough to tell which of the two routes applies to you.
Sixty minutes on Google Meet with a qualified lawyer. It costs €90 including VAT and will be deducted from the first invoice if an engagement follows.
