← All EU AI Act guides

EU AI Act Compliance - Software, Consultants, or DIY?

Choosing between EU AI Act compliance consultants and software comes down to three numbers: cost, calendar time, and how often the work repeats. Consultants are strongest on judgment calls. Software is strongest on the repetitive 80 percent. DIY is free until it isn't. We sell software, so read this with that in mind, and check our math anyway.

The worked example

Take a 40-person SaaS company with one Annex III hiring-related system (high-risk) and two chatbots (limited risk). The Act asks for classification, an Annex IV technical file, a risk register, data-governance and oversight documentation, plus Article 50 disclosures.

Approach Typical cost Calendar time Repeats well?
Compliance consultancy 15,000 to 60,000+ euros per engagement 6 to 16 weeks Each change re-opens the engagement
DIY with templates Staff time, often 100+ internal hours 8 to 20 weeks Knowledge leaves when the owner does
Dedicated software 97 to 497 dollars per month Days for first drafts Yes: re-run the interview when the system changes

Consultancy figures vary widely by market and scope; treat them as planning ranges, not quotes. The structural point does not vary: a law with continuous obligations rewards a tool that keeps documents current, because Article 9's risk management is explicitly a continuous, iterative process, not a one-time report.

When are consultants the right call?

Three cases. Genuinely novel legal questions (does Annex III even cover us?). Regulated industries where AI Act work overlaps sectoral law. And conformity assessments that need a notified body. For those, counsel plus software beats either alone: the software produces the evidence pack, the experts review it.

When is DIY enough?

If everything you run is minimal risk, honestly, DIY is fine. Document the classification decision and revisit when you ship new AI features. Our free risk check gives you that classification with reasoning you can file.

When does software win?

When you have real obligations and a real deadline. Annex III obligations apply from 2 August 2026 under the current text. AI Comply HQ runs the classification, generates the document set from one guided interview, and keeps versions and an audit trail as your systems evolve.

FAQ

Can we start with software and add counsel later?

That is the order we recommend. Generate the drafts first, then spend lawyer hours on review instead of drafting.

See what software finds in 3 minutes

Sources

This page is informational content, not legal advice. Talk to a qualified lawyer about your specific situation.