EU AI Act consulting for enterprise implementation
Paul Okhrem's EU AI Act consulting for enterprise teams starts at USD 80,000 for an 80-hour engagement. He helps organize the system inventory, controls and evidence for delivery. Qualified counsel confirms the legal duties that apply. The service supports operating decisions. It does not provide a legal opinion, certification or a guaranteed regulatory outcome.
Price: USD 1,000 per hour, 80-hour minimum, USD 80,000 floor. Delivered personally by Paul Okhrem. Reply within two business days. Read the published terms.
Who this EU AI Act engagement fits
The work fits a team that needs owners, controls and evidence to support qualified legal advice.
Best fit
- Business teams need one inventory of AI systems and uses.
- Counsel needs clear operating facts to assess the company's duties.
- An executive sponsor needs an owned plan for control gaps.
Not a fit
- A legal opinion, certification or guaranteed regulatory outcome.
- A claim that the minimum fee covers every system in an enterprise.
Keep legal interpretation and delivery ownership separate
| Work | Responsible role |
|---|---|
| Interpret scope, classification and legal duties | Qualified counsel and relevant specialists |
| Inventory systems and collect operating facts | Business and technology owners, supported by the consulting work |
| Fund changes and accept operating risk | Authorized executive owner |
| Implement and test controls | Named delivery, security, privacy and domain teams |
| Coordinate evidence and report progress | Paul within the agreed mandate and client control owners |
Neither a checklist nor a consultant's report grants regulatory approval. Independent assurance or conformity work, where required, must use the appropriate qualified route.
Does the EU AI Act apply to my company?
The EU AI Act may apply to AI providers, deployers, importers or distributors with a relevant EU connection. That connection can include certain uses of outputs in the EU. Scope depends on the system, role, use and exclusions; location alone is not enough.
Begin with each system's intended use, users, market and data flow. Check whether the company supplies the system or uses it under its own authority. It may also hold another role in the supply chain. Roles can differ by system. A material change may require a fresh review.
Paul helps record the facts and questions for counsel. Do not assume every chatbot is high-risk. Buying a tool does not transfer all duties to the vendor. Use the free EU AI Act checklist to prepare the initial inventory.
Current implementation milestones
Checked on September 27, 2026. The Commission's July 2026 AI Omnibus update and official implementation timeline supersede older summaries. Confirm the applicable provisions and transitions with counsel before relying on a deadline.
| Date | Milestone in the official timeline |
|---|---|
| August 2, 2025 | General-purpose AI provider rules and governance provisions began applying |
| August 2, 2026 | Article 50 transparency rules began applying, subject to specific transitions |
| December 2, 2026 | New prohibitions and a specific Article 50(2) transition for certain existing synthetic-content systems |
| December 2, 2027 | Annex III high-risk system rules apply under the updated timetable |
| August 2, 2028 | Annex I regulated-product high-risk system rules apply |
The Omnibus also simplified the earlier company AI-literacy requirement. Do not copy the original Article 4 wording into a current obligations register without checking the amended position. Role-based training remains a practical operating control, separate from a claim about a specific statutory duty.
Need a decision, not a report? Send a private brief. Paul replies within two business days.
Send a private briefWhat an EU AI Act consulting engagement produces
- An AI inventory with intended use, owner, status, vendor and relevant markets.
- A record of role and risk-classification questions for legal review.
- A map linking confirmed legal duties to controls, based on specialist advice.
- Requests for vendor evidence, open gaps and dependencies.
- A ranked plan to close gaps, with owners, dates and tests for sign-off.
- A management report that separates completed work from assumptions still to check.
The first phase should clarify what is known and missing, not label every system compliant. The teams that own the systems continue to collect evidence and put controls in place.
How NIST AI RMF and ISO/IEC 42001 fit
The NIST AI Risk Management Framework helps teams organize risk work. ISO/IEC 42001 addresses an AI management system. Their purposes differ from those of EU law. Using a framework or standard does not, by itself, meet the Act's duties.
For the broader operating framework, see AI governance consulting. To prepare the management system, use ISO/IEC 42001 readiness. Certification is outside Paul's advisory offer.
Scope, price and exclusions
The rate is USD 1,000 per hour, with an 80-hour minimum and USD 80,000 floor. Before signing, agree which systems and tasks are included. Set how counsel will advise, what evidence is needed and which outputs the work must produce. The minimum fee does not automatically cover a review of every system in an enterprise.
Legal opinions, formal certification, security testing and specialist regulatory assessments need separate contracts. No regulatory outcome is guaranteed. See published terms and send a non-confidential outline of the systems and decision deadline.
Frequently asked questions
Does a company outside the EU need to consider the Act?
It may need to. Relevant links to the EU market or use of outputs can matter, not just where the company is registered. Counsel should assess the exact provider, deployer or other role and applicable exclusions.
Did the AI Omnibus postpone every obligation?
No. The updated high-risk dates do not move every rule. Transparency, general-purpose AI, prohibitions and specific transitions have their own application dates.
Can a vendor's compliance statement close the review?
No. Request evidence relevant to the system and your role. The company must still understand how it uses AI, which duties it holds and which controls it needs.
What does EU AI Act consulting cost?
Paul Okhrem charges USD 1,000 per hour with an 80-hour minimum and USD 80,000 floor. The written scope defines the systems, evidence and delivery work included. Legal opinions, certification and specialist assessments are separate. Paul organizes the agreed operating work; qualified counsel confirms legal duties. No regulatory outcome is guaranteed.
Is the consulting report a legal opinion?
No. Paul organizes facts, delivery work and evidence. Qualified counsel interprets the law. Any certification or assurance process is separate.
Can training still be useful after the literacy changes?
Yes. People need to know how to use the tools, what is allowed and when to ask for help. Training can be useful even when a past description of the legal duty is out of date.
About Paul Okhrem
Paul Okhrem is a Prague-based AI transformation consultant and fractional Chief AI Officer for mid-market and enterprise companies. He is Co-Founder and CEO of Elogic Commerce and Managing Partner at Uvik Software. He has built B2B and enterprise software since 2009.
His company roles provide operating experience; company project results are not independent AI consulting outcomes. Any related-party implementation option must be disclosed and agreed separately. Read the evidence and measurement method.
Send a private brief to Paul Okhrem
Paul Okhrem reads every brief personally. Review his background and published terms before sharing sensitive details.