Services
Authorised AI Representative
For non-EU providers of high-risk systems or GPAI models, we act as the Union-established representative under Articles 22 and 54 — mandate, 10-year file, QMS evidence, and liaison with the AI Office and national authorities.
Why this service exists
The EU AI Act applies to providers outside the Union when they place AI systems or general-purpose AI (GPAI) models on the EU market, put systems into service in the EU, or where the output is used in the EU. For many non-EU providers, lawful access requires a single authorised representative established in the Union, appointed by written mandate, before the system or model is made available.
We act as that representative. Liability for the AI system remains with the provider. We are the local point of contact for the European AI Office and national authorities, and we hold the file those authorities will ask to see.
Who must appoint a representative
- Providers of high-risk AI systems (Article 22) — including AI used in employment, education, critical infrastructure, law enforcement, migration, justice, and certain products already regulated under EU law. High-risk obligations apply from 2 August 2026 unless the timeline is changed.
- Providers of GPAI models (Article 54) — models trained with large-scale self-supervision that can perform a wide range of tasks. GPAI representative duties apply from 2 August 2025. Some open-source releases may be exempt; commercial fine-tuning or deployment often is not.
The mandate must enable us to perform the statutory tasks and to be addressed directly by authorities. Multiple representatives are not permitted. The provider must give us the information and access we need; we can terminate the mandate and inform authorities if the provider fails to comply.
What we hold and do
- Quality management system — maintain an effective QMS that can be demonstrated to authorities on demand, typically on the EN 18286 platform we operate as a companion service.
- Ten-year file — verify and hold technical documentation, EU declarations of conformity, and records for at least 10 years, and provide them on request.
- Conformity support — assist with conformity-assessment preparation and check that provider obligations are met.
- Authority liaison — primary contact for the AI Office, market-surveillance authorities, and related investigations or corrective actions.
Practical notes
- Without a representative, covered non-EU providers cannot lawfully place the system or model on the Union market.
- Coordinate the representative mandate with DPO and data-protection arrangements where training or operational data is personal data.
- Fines under the Act can reach €35 million or 7% of global annual turnover, whichever is higher, alongside withdrawal from the market.
Most clients combine this mandate with QMS Management as a Service so the representative is not holding an empty file.
