We map and classify all AI systems in use according to Annex III of EU Regulation 2024/1689 — identifying which systems are high-risk, which fall under transparency obligations and which are exempt. This is the mandatory first step for any compliant organisation.

A detailed report mapping your compliance gaps, with a step-by-step roadmap updated to reflect the Digital Omnibus AI revised deadlines (approved by EU Parliament on 16 June 2026, 423 votes in favour): Art. 50 transparency from 2 August 2026 · Annex III high-risk obligations deferred to 2027–2028.

We deliver the complete documentation package required by the Regulation: technical file (Annex IV), risk management system (Art. 9), logging policy (Art. 12), human oversight procedures (Art. 14), activity register — all signed and immediately enforceable upon inspection.

The EU AI Act evolves continuously. Our monthly retainer service provides dedicated regulatory monitoring, automatic documentation updates, immediate alerts on new EU and national guidelines, and priority support in the event of inspections or regulatory proceedings.

We collaborate with AI engineers, MLOps specialists, data scientists and technology consultants across Europe to deliver end-to-end compliance solutions that combine technical expertise with legal precision. Referral partners receive a 20% fee on every signed contract.

The Studio supports companies even where a supervisory authority inspection is already underway (in Italy, ACN as the market surveillance authority for AI systems, AgID for notification and accreditation of conformity assessment bodies, alongside sector-specific authorities where relevant). Support includes: preparing and completing the required technical documentation (technical file, risk management system, post-market monitoring records), analysing the specific findings against applicable regulatory obligations, drafting responses to the authority's information requests, and defining a remediation plan with clear timelines.

We timestamp the key documents of your compliance file (technical documentation, EU declaration of conformity, conformity assessment) using RFC 3161 technical timestamping, aligned with Italian evidentiary standards (DPCM 22/02/2013) — independently verifiable proof of when your documentation existed in its exact form. Valuable for regulatory inspections, litigation exposure, and investor due diligence. Available as an add-on to any package or as a standalone service.

A working extension of CEFALO Time-Seal into the agentic economy: an RFC 3161 certification endpoint that an AI agent can discover and pay for entirely on its own, using the x402 payment protocol — no account, no invoice, no human in the loop. As agents increasingly make decisions and execute payments autonomously, Article 14 requires proof of human oversight. This gives you a certified, independently verifiable timestamp of what an agent decided, before the action executes — not a reconstruction after the fact. Live and operational: agentnotaryprotocol.netlify.app.