AI Act Exposure Scan · for European scale-ups and mid-caps

The EU AI Act has four dates.
You need to know which one is yours.

In ten working days you will know exactly which of your AI systems the EU AI Act touches, what it demands of you and by when — in one register your board, your lawyers and your engineers can all work from.

02 · 08 · 2026
AI interaction disclosure
Chatbots and assistants must be disclosed as AI (Art. 50). Not delayed.
02 · 12 · 2026
AI content marking
Published AI-generated media must carry machine-readable marking. Not delayed.
~ 12 · 2027
High-risk obligations
HR screening, credit scoring, essential services — pending formal adoption of the May 2026 agreement.
~ 08 · 2028
AI in regulated products
Safety-component AI in machinery, devices and vehicles.

Penalties scale to €35M or 7% of worldwide turnover. Most scale-ups cannot yet say which dates apply to them.

What lands on day fifteen

Five deliverables. Three audiences. One picture.

A law-firm memo is unusable by engineers. A technical audit is unusable by boards. Every Scan deliverable is written to be worked from by all three at once.

For your lawyers

AI System Register

Every AI system you use or ship — bought, embedded or built, including shadow AI: in or out of scope, risk tier, operator role, applicable articles — each classification with its evidence.

For your board

Exposure Map

One page. Your systems by risk tier and deadline. The artifact leadership keeps on the table.

For your engineers

Gap & Effort Register

The obligations that actually apply, what is missing today, and the size of each fix — S, M or L.

For your leadership

6-Month Action Plan

Sequenced against your product roadmap and both legal timelines, every action with a named owner and a month.

For all three at once

Executive Readout

Sixty minutes with your leadership. Decisions logged live — the session ends with a documented next step, not impressions.

Included

SMC pathway check & re-map

A check of whether you qualify for the simplified mid-cap compliance pathway, plus one free re-map within six months if the adopted law changes your classification.

How it works

Three calendar weeks. Two workshops. Zero disruption.

PhaseActivitiesElapsed timeYour time
1 · IntakeKickoff (60 min), questionnaire out, document requestDays 1–3~2 h + questionnaire
2 · DiscoveryTwo workshops — product/engineering and ops/compliance — plus questionnaire analysisDays 4–72 × 90 min
3 · AnalysisClassification, deadline mapping, gap sizing, draft registersDays 8–12short follow-ups
4 · ReadoutExecutive session, decision log, final deliveryDays 13–1560 min

Fully remote. The workshops are the only synchronous commitments, scheduled within normal working hours. No engineer is pulled from delivery; no war room, no month of interviews. Ten working days of our focused work, three weeks on your calendar.

Who it's for

Built for scale-ups and mid-caps in regulated markets.

The Scan fits you if

  • You are a European tech scale-up or mid-cap, roughly 50–750 people, using or shipping AI features
  • You operate in or sell into regulated markets — fintech, iGaming, insurance, regulated SaaS
  • An enterprise customer's due-diligence questionnaire or an investor has started asking about AI governance
  • Nobody in the company can currently list every AI system in use — which is normal

It is not for you if

  • You need a full conformity assessment for a high-risk AI product today — that is legal and notified-body work, and we will say so in the first call
  • You want a certificate that says "compliant" — no honest advisor can sell you one
  • You want someone to build the tooling — implementation runs through delivery partners, under your roof
Pricing

Fixed scope. Fixed price. And it counts toward what comes next.

€4,500–€7,500 fixed

For the standard Scan, 50–250 employees. Larger organisations and multi-product portfolios are quoted at the upper band after the free exposure check.

100% of the Scan fee is credited against an AI Readiness Audit or a fractional AI Transformation Lead retainer signed within 90 days. If the Scan leads somewhere, it was free.

Founding clients · 3 places

The first three Scan clients receive the founding-client rate — a reduction of around 30% — in exchange for a written testimonial and an anonymised case study.

Named, capped at three, and it ends when the places are taken. A discount without a name, a reason and an end is not a discount we run.

[Pricing display note: confirm invoicing entity and statutory VAT treatment before this page goes live — Offer Spec §11, Action 1.]

Where the Scan ends

A management instrument — deliberately not a legal opinion.

The Scan does not provide legal advice and no deliverable will ever say "compliant". You receive exposure, gaps and actions — classifications prepared for planning, with every uncertain item explicitly flagged for review by your counsel or our partner law firm. That boundary is not a limitation of the offer; it is the reason all three of your audiences can act on it without a translation layer.

Who runs it

Transformation leadership, not slideware.

Anamarija Škof
Founder, ATENA · PMP® · fractional AI Transformation Lead

A decade-plus of delivery, operations and business analysis inside fintech, iGaming, insurance and regulated SaaS — including COO and Head of Operations roles. The Scan is run by someone who has sat on your side of the table: accountable for the roadmap, the regulator and the team at the same time.

ATENA sells transformation leadership, not technical implementation. Delivery tooling runs through vetted partner agencies; legal certainty runs through your counsel or our partner law firm. What stays with us is the part scale-ups actually lack: someone senior who owns the whole picture.

Start here — free

The 20-minute exposure check.

Five questions, a verbal verdict, no deck and no follow-up sequence. You leave knowing whether the AI Act is a 2026 problem, a 2027 problem, or not your problem — and whether the Scan is worth your money. Roughly half the companies we speak with do not need it yet, and we tell them so.

Book the free exposure check

Prefer email? [contact@atena-domain] · Replies within one working day.