Founding Partner
Guillermo Passas Varo
Colegiado nº
7941
Ilustre Colegio de Abogados de Granada (Granada Bar Association)
Of Counsel
David Sánchez Lorenzo
Colegiado nº
8281
Ilustre Colegio de Abogados de Granada (Granada Bar Association)
This service is intended for companies that operate or deploy artificial intelligence systems falling under Annex III of the AI Act: recruitment tools, credit scoring systems, insurance risk assessment solutions, or platforms whose decisions directly affect individuals. If you have already identified high-risk systems, or the initial virtual consultation has established that you have them, this is where complete compliance is built. By the close of the engagement you will hold all the documentation required by Chapter III of the Regulation, the fundamental rights impact assessment properly registered, and your contracts and digital presence updated.
High-risk compliance covers a set of interdependent obligations that have to be resolved in a coordinated way. Regulation (EU) 2026/1744 postponed enforceability to 2 December 2027 for Annex III and 2 August 2028 for Annex I: there is room, but classification and technical documentation are not improvised. By the close of this engagement that coordination is done: technical documentation, contracts and digital presence updated, and the FRIA registered before deployment. Compliance built in advance, not under pressure.
A unilateral confidentiality agreement signed by PASSAS before the video consultation, available at no additional cost on request. It binds the firm alone — no signature is required from the client — and adds an explicit contractual layer on top of the professional secrecy obligations inherent to the practice of law.
A 60-minute working session by video call in which we analyse your situation, your specific needs and our ability to help you. We assess whether we can take on the matter and give you the fixed price in advance. You can book it directly through the Google Calendar link on our website and pay €90 by Stripe.
Legal analysis of the business model that determines which rules affect the company, what legal risks exist and what documentation is mandatory before operating. Covers the sectoral regulatory framework, data protection obligations, essential contracts and any applicable authorisation or licensing requirements.
Legal analysis of the artificial intelligence systems the company operates or deploys under Regulation (EU) 2024/1689. Determines the company's regulatory role (provider, deployer or both), classifies each system according to the AI Act risk tiers and establishes the map of applicable obligations. The documentary basis on which any compliance process is built.
The documentation required for GDPR compliance and, more broadly, for any rules on data protection and on the processing and transfer of data, including international transfers, both in dealings with users and with the providers that process data on your behalf, with the legal mechanisms needed to operate without regulatory exposure.
The legal documentation required to operate online: legal notice, privacy policy, cookie policy and, where applicable, terms of sale. Drafted with legal precision and adapted to the specific activity, not carried over from another website. Complies with the GDPR and with information society services rules.
Public statement on the use of artificial intelligence in the company's products and processes: which systems are used, for what purpose and with what safeguards for the users affected. A deliverable that clients, regulators and investors will demand with increasing frequency, and that few firms are yet in a position to provide.
Contractual documentation to formalise relationships with clients and suppliers, with the terms, liabilities and scope clearly defined from the first engagement. Includes the services agreement adapted to the company's operations, with limitation of liability clauses and payment terms, ready to sign.
The Fundamental Rights Impact Assessment required by article 27 of the AI Act from certain deployers of high-risk AI systems. Identifies the effects of the system on the rights recognised in the EU Charter, documents the mitigation measures and must be registered in the European database before deployment.
At PASSAS we work fast, and we intend to be faster than the competition without losing quality along the way. That is why we like to tell you how long you will wait for your service. It is an indicative figure, since some engagements are more complex than others. The Engagement Letter sets out a deadline tailored to your matter, one we will do everything we can to meet, or to beat. That is our commitment to quality.
We tell you what you will pay for your service: at PASSAS we work with a transparent fee policy. That said, we are not a marketplace. Every service is tailored and the fees follow the workload borne by the lawyer in charge. Even so, we want to give you an indicative price for this service, so that deciding to instruct us and booking your virtual consultation is easier.
We know how much it matters that the lawyer you instruct has real command of the subject you are handing over. We have written on questions related to the service you are considering.
El AI Act entra en su fase más exigente el 2 de agosto de 2026. Providers, deployers y providers accidentales: clasifica tu situación ahora.
El acuerdo provisional del 7 de mayo aplaza las obligaciones de alto riesgo del AI Act hasta diciembre de 2027. Pero hay obligaciones que no se mueven. Sepa exactamente dónde está su empresa.
El Digital Omnibus aplaza el Anexo III a 2027, pero el Artículo 4 lleva vigente desde febrero de 2025. Qué debe documentar el responsable del despliegue antes del 2 de agosto.
Deducted from your first invoice if you go on to instruct us. VAT included.
Minutes to talk to a registered EU lawyer who will answer your questions and assess your case.
Remote. No car, no waiting room, no commuting, no paperwork. An EU lawyer in your living room.
