For AI providers outside the EU
EU authorised representative for AI providers (AI Act Art. 54 and 22)
Your authorised representative in the EU, with a legal adviser who actually reads the documentation
For providers outside the EU of general-purpose AI models (Art. 54 AI Act) and of high-risk AI systems (Art. 22 AI Act, applicable from 2 December 2027 or 2 August 2028, depending on the system). Optionally also as your representative under the GDPR (Art. 27). I check the technical documentation, keep it for ten years and act as your point of contact for the AI Office and the supervisory authorities.
Fixed annual feeplus a one-off check up front, both agreed in advance
Mandate within 2 to 3 weeks
Who it is for
- Providers of general-purpose AI models established outside the EU that offer their model here, including through their own app
- Providers of AI systems outside the EU preparing for the high-risk rules
- Companies outside the EU that target people in the EU and have no GDPR representative yet
Not for:
- Providers with their own establishment in the EU that can take on this role
- Anyone looking only for a mailing address, without a substantive check
- Fully open-source models without systemic risk: this obligation does not apply to them (Art. 54(6) AI Act)
What you get
- A written mandate in line with Art. 54(3) and 54(4) AI Act
- A check that the technical documentation (Annex XI) and the information for downstream providers exist, with a short report on what is missing
- Keeping the documentation for ten years after the model is placed on the market
- Point of contact for the AI Office and national supervisory authorities, with requests passed on within one working day
- Optionally, representation under Art. 27 GDPR, with wording for your privacy notice and model documentation
The law behind it
Every finding links to the explanation on this site, with the legal provision. You do not have to take my word for it.
Who does the work
Zahed Ashkara, freelance AI and privacy legal adviser for the GDPR and the EU AI Act. He does the work himself, exclusively as a freelancer.
Experience, certificates and languages of Zahed AshkaraHow it works
- 1
A 30-minute call
You tell me which model or system you offer in the EU. I tell you honestly whether the obligation applies and whether I can take on the role.
- 2
Checks up front
I read the technical documentation and screen against sanctions lists. Anything missing goes into a short report with sources.
- 3
Mandate and listing
We sign the written mandate. You receive the wording to name me as your authorised representative, and I keep the documentation on file.
Price and terms
Fixed annual feeplus a one-off check up front, both agreed in advance
You receive a proposal with the annual fee, the one-off check and the term of the mandate up front. No surprises afterwards.
Praxikon is a trade name of Embed AI (Dutch Chamber of Commerce 90283597). Proposal, terms and invoice are in that name.
Questions
What does an EU authorised representative cost?
A fixed annual fee plus a one-off check up front. You receive the amounts after the call, within three working days. The contracting party is Embed AI (Dutch Chamber of Commerce 90283597).
Can a natural person be an authorised representative?
Yes. The AI Act defines the authorised representative as a natural or legal person in the EU with a written mandate from the provider (Art. 3(5)).
What exactly does the authorised representative do?
Verify that the technical documentation exists and the obligations are met, keep that documentation for ten years, provide information to the AI Office on request and cooperate. The AI Office and the authorities can address the representative in addition to or instead of the provider (Art. 54(3) and (4)).
What happens if a provider does not comply?
Then I must terminate the mandate and inform the AI Office (Art. 54(5)). The terms say so as well.
Does this also apply to models already on the market before August 2025?
Yes. They have until 2 August 2027 to comply (Art. 111(3)). New models need an authorised representative before they are placed on the EU market.
Can you also be our representative under the GDPR?
Yes, if you are established outside the EU and target people in the EU (Art. 27 GDPR). It can be part of the same mandate.
Who does the work?
Zahed Ashkara, freelance AI and privacy legal adviser, does the work himself and puts his name under the deliverable. He works exclusively as a freelancer, not through secondment or employment.
When can the work start?
We agree the start date in the 30-minute call. Send the question or assignment description in advance, and you will know in that call whether and when it fits.
A 30-minute call
Tell me where you stand.
I tell you honestly whether I can help, and what it costs. Within three working days you have a proposal with a fixed price.
Prefer email? info@embedai.nl