AI and compliance

EU AI Act readiness and technical documentation

The EU AI Act also applies to Swiss companies that place AI systems on the EU market or whose AI output is used in the EU. We establish which of your systems it covers and in which risk class, close the gaps before the deadlines, which for high-risk systems under Annex III is now 2 December 2027, and build the technical documentation with your engineers. A gap assessment takes 3–4 weeks and starts at CHF 12,000.

Request a proposal Book a free 30-minute call

You need this if

  • An EU customer asks in a tender whether your product complies with the AI Act.
  • Your software scores, ranks or filters people: applicants, borrowers, policyholders or students.
  • You are not sure whether you are a provider, a deployer, or both.
  • Your product is regulated, such as a medical device or a machine, and contains an AI component.
  • Your lawyers have explained the regulation, but nobody has turned it into engineering work.
  • You heard the deadlines moved and want to know what still applies, and when.

What you get

  • AI system inventory

    All AI systems and general-purpose AI models you build or use, with your role for each one.

  • Risk classification

    Prohibited, high-risk under Annex I or III, transparency duties or minimal risk, with the reasoning written down, including any Article 6(3) exception.

  • Gap assessment and roadmap

    What is missing against Articles 9 to 17 and the deployer duties, with effort, owners and deadlines.

  • Technical documentation

    Annex IV documentation, risk management file, data governance and the design of human oversight, built with your engineers.

  • Conformity support

    Quality management system, EU declaration of conformity, registration and post-market monitoring.

How it works

  1. Inventory

    Week 1

    Workshops with product, engineering and compliance to list systems, roles and markets.

  2. Classification

    Week 2

    The risk class of each system with its legal basis, reviewed with your counsel.

  3. Gap assessment

    Weeks 2–4

    Requirements compared with current practice, with a costed roadmap.

  4. Documentation

    From month 2

    Technical documentation and processes, system by system.

Packages and prices

Prices are indicative, in Swiss francs and excluding VAT. Your proposal confirms scope and price.

Why Bit2Board

  • Architects and engineers write the documentation: we translate legal requirements into system design, logging, data governance and tests.
  • Data Scientist programme (2023) and deep-learning training: we understand how the models in your product are built.
  • We work with your lawyers, not instead of them. Legal interpretation stays with counsel.
  • Swiss perspective: we also follow Switzerland's own AI rules, for which the Federal Council has asked for a consultation draft by the end of 2026.

How we use AI

  • We use AI the way the AI Act expects you to: documented, under human oversight, with decisions logged.
  • AI helps map requirements to your existing documentation and code; the classification is a human decision.

Questions

Does the EU AI Act apply to a Swiss company?

In many cases, yes. Under Article 2 it applies to providers that place AI systems on the EU market or put them into service there, wherever they are established, and to providers and deployers outside the EU when the output of their AI system is used in the EU.

What are the current deadlines?

The prohibitions and the AI literacy duty have applied since 2 February 2025, and the transparency obligations of Article 50 since 2 August 2026. The Digital Omnibus on AI, Regulation (EU) 2026/1744 in force since 27 July 2026, moved the high-risk obligations to 2 December 2027 for Annex III systems and to 2 August 2028 for AI in products covered by Annex I. See our overview of the changes.

Which AI systems are high-risk?

AI systems that are safety components of products covered by the EU legislation listed in Annex I, and systems used in the areas of Annex III: biometrics, critical infrastructure, education, employment, access to essential services such as credit and insurance, law enforcement, migration and the administration of justice. Article 6(3) exempts some Annex III systems that pose no significant risk, but never systems that profile people.

Are you lawyers?

No. We are architects and engineers. We prepare the technical classification and documentation and work with your legal counsel, who signs off the legal interpretation.

How high are the fines?

Up to EUR 35 million or 7% of worldwide annual turnover for prohibited practices, and up to EUR 15 million or 3% for most other obligations, including the high-risk requirements. For SMEs, and since the Omnibus also for small mid-caps, the lower of the two amounts applies.