EU AI Act · enforcement live 247 founders on the list · beta cohort capped at 300 Aevum AI · Compliance Operating System
79 days to enforcement · Article 6, Annex III

Selling AI into Europe? Your buyers are about to ask one question.
Have the answer ready.

Aevum is the Compliance Operating System for AI vendors with European customers. Built first for non-EU teams (US, UK, APAC) with EU pipeline, equally fluent for EU-native AI companies. We turn your technical documentation into a legally verified Compliance Passport in 48 hours — the artifact procurement is about to ask for.

Take the 90-second diagnostic → Join the waitlist 247 on the list · 53 beta slots left
Time to passport
48 hours
Vs. external counsel
12 weeks
Articles covered
6, 9–17
Risk-tier diagnostic Question 1 of 3
90 seconds · Article 6 §1 mapping · email required only to claim a slot
EU AI Act enforcement timeline
79days until high-risk
Aug 2024
Act enters force
Feb 2025
Prohibited practices banned
Aug 2025
GPAI obligations in effect
Aug 2026 · 79 days
High-risk obligations apply · procurement is asking now
Aug 2027
Embedded high-risk systems · full conformity
03The compliance dilemma

When a major European customer evaluates your AI system, you have three bad options and one good one.

"
Can you provide documentation showing your AI system complies with the EU AI Act, including a Risk Assessment under Article 9 and a Model Card per Annex IV?
— Procurement, every EU enterprise buyer, Q4 2025 onward
Option 01 · the consultant route

Hire external counsel

€22,000
12 weeks minimum · billable hours
Compliance firm charges premium rates for documentation. Your buyer's procurement window closes in six.
Option 02 · the internal route

Build it in-house

3 engineers
6 months · diverted from product
Pull your senior engineers off the roadmap to read 144 pages of regulation, then translate it into auditable evidence.
Option 03 · the do-nothing route

Lose the deal

€0
Pipeline → competitor
No passport, no procurement. Your enterprise buyer moves to a vendor whose answer was ready.
04

There is a fourth option.

Generate audit-ready Article 6, 9–17 evidence in 48 hours. No consultants. No engineering diversion. No lost deals. The Compliance Passport your buyer is asking for, before they ask.

Join the waitlist →
04The Aevum process · Regulation 2024/1689 aligned

From zero documentation to audit-ready in 48 hours.

Three steps. Three artifacts. One Compliance Passport, signed and timestamped.

01

Upload

~5 minutes

Share architecture, data sources, training pipeline, and intended use through a guided intake. We handle SOC2-grade encryption and EU-only residency.

↳ Output: System Profile
02

Map & generate

~47 hours

Aevum's regulation engine maps your system to Articles 6, 9–17 and Annex IV requirements, then drafts every required artifact with citations to the source clause.

↳ Output: Audit Evidence Pack draft
03

Verify & ship

Same day

Human-in-the-loop review by AIGP-certified specialists. Signed, timestamped, and ready to hand to procurement teams or a Notified Body.

↳ Output: Compliance Passport
05What ships in your Audit Evidence Pack

Six artifacts. Procurement-grade. Audit-defensible.

Signed

Compliance Passport

Doc 06 · Executive sign-off
Article 9

Risk Assessment

Doc 02 · Regulatory analysis
Annex IV

Model Card

Doc 01 · System specifications
Article 17

RACI Matrix

Doc 03 · Responsibility map
Article 10

Data Lineage

Doc 04 · Data flow documentation
Article 13

Control Log

Doc 05 · Governance & controls
01

Model Card

System purpose, intended use, intended users, foreseeable misuse, training data summary. The first thing procurement asks for.

Annex IV §1
02

Risk Assessment

Foreseeable risks, severity, mitigation strategy. Mapped to your AI system tier with clause-level citations.

Article 9
03

RACI Matrix

Who is responsible, accountable, consulted, informed. The accountability map every Notified Body wants to see first.

Article 17
04

Data Lineage

Source-to-model data flow, governance steps, retention, residency. End-to-end traceability under GDPR + AI Act overlap.

Article 10
05

Control Log

Operational controls, monitoring, post-market surveillance hooks. The evidence trail behind every claim.

Article 13
06

Compliance Passport

Executive summary, sign-off, version-controlled. The single document you hand to a procurement team.

Cover
06How Aevum compares

Other tools sell compliance theatre. We sell unblocked deals.

External counsel Build in-house Vanta-style platform Aevum AI
EU AI Act focus General DIY SOC 2 / ISO Articles 6, 9–17, Annex IV
Time to passport 10–12 weeks 3–6 months 4–8 weeks 48 hours
Cost €22k+ €80k internal €18k/yr From €499/mo
Ships an actual passport No No No Yes — signed & timestamped
AIGP-certified review Sometimes No No Every passport
Updates with regulation Re-engagement Manual Quarterly Continuous
Procurement-ready output PDF essay Spreadsheets Dashboard screenshot Compliance Passport
Source comparison · industry public pricing · May 2026
07Pricing

Two ways in. Both close deals.

Beta is free for early customers. Professional starts the day your first procurement request lands.

12 spots left
Beta · early access

Beta

Free· up to 5 systems
Limited availability · lifetime 30% off Pro after beta closes
  • Up to 5 AI systems
  • Audit Evidence Pack generation
  • Slack support & community access
  • Quarterly regulation updates
Apply for beta
08About Aevum AI

A compliance team in a box, built where the buyers are.

Aevum was founded by AI builders who lost European deals not because the product was wrong, but because the paperwork wasn't ready.

We built the Compliance Operating System we wished we had: regulation translated into evidence; legal language translated into procurement-ready documents; one Compliance Passport that closes the gap between your engineering team and a buyer's procurement office.

Most of our beta cohort are non-EU teams — US, UK, Canadian, APAC AI vendors — with growing European pipeline and no in-house compliance function. We also work with EU-native AI teams who want to be operational ahead of the 2 August 2026 enforcement deadline. Wherever you're based, the obligation kicks in the moment a European customer signs.

Founded
2025
Operating across Berlin, Dublin and London.
Beta cohort
300 vendors
US, UK, DACH, Nordics, Benelux and EU-native AI teams.
Regulation coverage
Articles 6, 9–17
Plus Annex IV and GPAI obligations under Article 53.
Median time to passport
48 hours
Versus 10–12 weeks for external counsel.

What we are. What we aren't.

We areA compliance product — software with AIGP-certified humans in the loop.
We areBuilt specifically for the EU AI Act, not retrofit from SOC 2 or ISO 27001.
We areA passport you can hand to a procurement officer the morning they ask.
We aren'tA law firm. We're not a substitute for legal counsel on adversarial questions.
We aren'tA SOC 2 platform. Security frameworks don't satisfy AI Act obligations.
We aren'tA consultancy with a quarterly engagement. The passport ships in 48 hours, not 12 weeks.
09Field notes · the Aevum journal

Reading from the front lines of enforcement.

What we learn shipping passports, mapped to what's actually happening in EU procurement offices and Notified Bodies.

10FAQ

Questions before the lawyers arrive.

Have something we haven't covered? hello@aevum.ai — replies in <24 hours.

01Does the EU AI Act apply to us if we're not based in Europe?+
Yes, if your AI system is placed on the EU market or its output is used in the Union. The Act has explicit extraterritorial reach (Article 2). Our diagnostic above gives a confident answer in 90 seconds.
02What exactly is a Compliance Passport?+
A signed, timestamped, version-controlled document set: Model Card, Risk Assessment, RACI Matrix, Data Lineage, Control Log, and an Executive Summary. It maps every claim to a specific Article and clause — defensible to a Notified Body, readable by a non-lawyer procurement officer.
03How is Aevum different from Vanta or Drata?+
Vanta and Drata automate SOC 2 and ISO 27001. They are excellent at security frameworks. The EU AI Act is a different regulation — Articles 6, 9–17 require evidence Vanta does not collect. Aevum is purpose-built for AI Act compliance and ships the passport other platforms don't.
04Is this legal advice?+
No. Aevum generates compliance documentation and conducts AIGP-certified review. For CE marking under high-risk classification you'll still engage a Notified Body. We give you the audit-ready evidence pack they expect to see on day one.
05How is my data handled?+
EU data residency only · TLS 1.3 in transit, AES-256 at rest · SOC 2 Type II audit in progress. We never train on customer data. You retain full ownership of every artifact generated.
06What happens after beta?+
Beta customers get 30% lifetime off Professional pricing and priority access to new artifact templates as the Act's secondary legislation lands. Your historical packs remain accessible regardless of plan.
79 days until enforcement · 247 founders on the list

Your buyer hasn't asked yet.
That's the only good news.

The next email from EU procurement ends with one sentence: “Please attach your AI Act documentation.” Reserve your beta slot now. Have the passport ready, signed, and timestamped before they finish typing.

Beta closes when we hit 300. 53 slots left. No spam · Unsubscribe anytime · EU data residency