AI Act deployer obligations in force since August 2025

You ship AI features.
Enterprise buyers want governance.

75% of SaaS companies have shipped AI features. But 66% of enterprise buyers require governance documentation before signing. Without it, your deal stalls in procurement — and nobody tells you why.

75% of SaaS ship AI features
66% of buyers require governance
2–3 weeks to full compliance
from EUR 790 complete governance

Your enterprise deal is stuck in procurement.
And nobody tells you why.

Your product is technically ready. But security review, vendor assessment, and compliance checks drag on for months — because you're missing the documentation enterprise buyers expect.

Deal blocker: missing AI governance

66% of B2B buyers require a SOC 2 or equivalent governance report before signing. Without one, the deal doesn't close — or takes months longer. (Source: AICPA/Comp AI, 2025)

GPAI deployer obligations are already live

Since August 2025, deployers must ensure human oversight, vendor due diligence, and AI output monitoring (AI Act, Art. 26). Full enforcement with fines up to 3% of global turnover starts August 2026.

Customer data flows through AI uncontrolled

Your developers use Copilot, ChatGPT, and Claude with production data. Without an acceptable use policy and data classification, you risk a GDPR incident — and lose customer trust.

VCs and investors ask about governance

Due diligence is changing. 98% of enterprises plan to increase AI governance budgets. Investors want to see that you have risks under control — not that you're unaware of them. (Source: Corporate Compliance Insights, 2025)

Governance documentation that unlocks enterprise deals.

In 2–3 weeks, you have everything an enterprise buyer expects in a security review. No months of consulting — concrete deliverables tailored to your SaaS company.

AI Policy Acceptable Use + Data Classification

AI usage policy for development and operations. Clear rules for Copilot, ChatGPT, custom models — what's allowed, what's not, and with which data.

Risk Register AI Act risk classification

Mapping of all AI systems, risk classification per AI Act, responsibility matrix. Foundation for vendor assessments and internal audits.

Compliance Pack Deployer documentation

GPAI deployer obligations, human oversight processes, incident response plan. Everything you need for enterprise RFPs and security reviews.

Three steps. No long project.

You invest 2–3 hours of your time. We handle the rest. In 2–3 weeks, you have complete governance documentation.

1

We map AI in your product

Audit of AI tools, API integrations, and data flowing through models. We identify risks and regulatory gaps — in 1–2 days.

2

We prepare tailored documentation

AI policies, risk register, deployer compliance pack, team training. Everything specific to SaaS — not a generic template.

3

We train and hand off

Training for developers and management, employee certificates. We integrate governance into your existing workflows (CI/CD, onboarding).

Information for your specific role

AI governance affects the entire leadership team. See what matters most for your particular role.

Don't lose another enterprise deal
over missing governance.

In 15 minutes, we'll figure out where you stand today, what to tackle first, and what it will cost. No commitment, no sales pressure.

Book an intro call →