Who does what in AI Act compliance and what to buy: consultants and their cost, notified bodies for the systems that need them, what to outsource and what to keep, and self-hosted tools that produce AI governance evidence.
What AI Act consultants and implementation partners do, from inventory and classification to documentation, QMS and deployer processes, how their work fits the Commission's cost estimates, SME relief, and checks before hiring.
When you need a notified body and how to choose one: which systems require third-party assessment, independence and competence rules, the Commission's public list, subcontracting, certificate validity, fees for SMEs and the Commission's cost estimates.
Splitting AI Act work between your teams, partners, tool vendors and notified bodies: duties that stay with the provider or deployer, human oversight and literacy, documentation and testing work commonly outsourced, and value chain agreements with suppliers.
Open-source and self-hosted tools that produce AI Act evidence: LLM tracing and evaluation, model vulnerability probing, guardrail scanners and GRC tracking, their licenses and edition limits, and what logging and testing duties they support.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.