✓ Key transparency and AI-literacy obligations are already in force

Scope Check and Compliance Pack

If your business uses AI, such as chatbots, content generation, or AI-assisted analysis, the EU AI Act may already apply to you. Aztec gives you the ready-made compliance pack to put proper AI governance in place: clear rules, staff training, transparency notices and audit-ready evidence. In plain English, in a day, not a months-long project.

Aztec AI Compliance introduction video Watch: 2 min introSee how the Scope Check works
Free Scope Check: find out where you stand Get your templates

Why start with the Scope Check?

  • Free, and gives you an answer in minutes, no card details needed
  • Plain English, no legal jargon
  • Shows exactly which EU AI Act obligations apply to your business
  • Points you to the right compliance pack tier
  • Built on 30+ years of UK financial services compliance experience

← New here? Watch the 2 minute video first.

AI literacy duties are already in force. Don't wait for enforcement to begin. Get EU AI Act ready now.

Know Your Dates

The EU AI Act rolls out in stages. This list checks itself against today's date, so the status you see below is always current, not something we have to remember to update by hand.

Source: EU AI Act (Regulation (EU) 2024/1689) as amended by the Digital Omnibus (Regulation (EU) 2026/1744, in force since 27 July 2026). General information, not legal advice — always confirm which dates apply to your specific system with a specialist.

2 February 2025
Prohibited practices banned, and the AI-literacy duty begins. Social scoring, manipulative or subliminal techniques, workplace/education emotion recognition, and untargeted facial-scraping are banned outright. Every provider and deployer must also support staff AI literacy from this date (Article 4).
2 August 2026
Transparency duties apply. Tell people when they're interacting with an AI chatbot, and label AI-generated or manipulated content such as deepfakes (Article 50).
2 December 2026
New prohibited category, and a marking grace period ends. Non-consensual intimate imagery ("nudifier" apps) and AI-generated CSAM become prohibited. Generative systems already on the market before 2 August 2026 must also have machine-readable AI marking in place by this date.
2 December 2027
High-risk obligations apply (Annex III). Recruitment, credit and insurance, biometric identification, education, and essential-services AI must meet the full high-risk regime: human oversight, logging, monitoring, and a Fundamental Rights Impact Assessment where required. Deferred from the original 2 August 2026 date by the Digital Omnibus.
2 August 2028
High-risk obligations apply (Annex I). The same high-risk regime extends to AI embedded in regulated products, such as machinery and medical devices.

What Non-Compliance Costs

These fines are not proposals or future plans. They have been enforceable since 2 August 2025, under Article 99 of the EU AI Act, and the European Commission opened its first formal investigations into potential breaches in early 2026.

Source: EU AI Act (Regulation (EU) 2024/1689), Article 99. Figures unchanged by the Digital Omnibus. General information, not legal advice.

€35m or 7%
of worldwide annual turnover, whichever is higher
Breaching the prohibited practices list (Article 5): social scoring, manipulative techniques, unlawful biometric use, and similar red-line practices. The most severe tier.
€15m or 3%
of worldwide annual turnover, whichever is higher
Most other provider and deployer breaches, including the Article 50 transparency duties and high-risk obligations once they apply.
€7.5m or 1%
of worldwide annual turnover, whichever is higher
Giving incorrect, incomplete, or misleading information to a regulator or notified body.
The SME rule works in your favour. For SMEs and start-ups, Article 99(6) flips the calculation: the fine is whichever figure is lower, not higher. A small business fined under the middle tier pays the lesser of €15 million or 3% of its own turnover, not the headline number built for large multinationals. It is still a real and serious exposure, just not an impossible one, and it is exactly what an AI Usage Policy, a Register, and an evidence trail are for.

Why Aztec

Bridget Convey, founder of Aztec AI Compliance

Bridget Convey is the founder of Aztec AI Group, which develops products and services to help organisations manage the risks created by a fast changing technology landscape. Its tools are online, easy to use, and built to keep organisations safe, giving boards and senior management clear, practical guidance and the confidence to make AI and technology decisions without delay.

Her thinking is shared through a series of three books, The Board Decision Framework, AI: A Wolf in Sheep's Clothing and Quantum Risk: The Elephant in the Boardroom, together with a regular series of white papers and videos. Together, they are designed to educate on these emerging risks, and to equip boards with a practical framework, DIRECT, for decisions that are safe, auditable and defensible.

Her background spans thirty years in UK financial services, delivering complex regulatory transformation at every level, across banking, asset management and insurance. More recently, she has consulted on the decisions organisations need to make around AI and quantum risk, with a particular focus on making board level decision making more transparent.

She is ISO/IEC 42001 certified, completed the Oxford Saïd AI Strategy and Leadership Programme, and holds PRINCE2 qualification. She is a former holder of the US SEC Series 7 licence, the FINRA qualification required to trade the full range of US securities, and its UK equivalent of the time, the Securities and Futures Authority's Registered Representative Examinations.

⚠  Important Notice: Please Read Before Purchasing The document packs sold on this website are template resources for general guidance purposes only. They do not constitute legal advice and should not be relied upon as a substitute for independent professional legal advice tailored to your specific circumstances. Aztec AI Compliance and TendoVend Ltd accept no liability for any loss, penalty, fine, or regulatory action arising from use of these materials without independent legal review. By purchasing you confirm you have read and understood this notice.

Questions before you buy? Not sure which tier is right for you, or would you like to speak with a solicitor before purchasing? Email us at info@aztecaicompliance.com. We respond within 2 business days and are happy to refer you to an independent solicitor if required.
Who this is for

Does this apply to me?

The EU AI Act reaches far beyond the companies that build AI. If your business uses AI tools, you are a "deployer", and if your AI reaches the EU (you sell there, your AI output is used by people there, or you have staff there), you have obligations too.

Most everyday business AI use is low or limited risk. But you still need to show you're governing it properly:

  • Knowing what AI you run: a register of every tool and what it does
  • Training your people: the Article 4 AI literacy duty, already in force
  • Being transparent: telling people when they're dealing with AI or AI-made content
  • Keeping the evidence: what regulators, clients and auditors will ask to see

UK-only, no EU link?

There is currently no equivalent UK AI Act, but UK GDPR, the Equality Act and consumer law still apply to your AI use, and the same pack gives you a voluntary best-practice baseline your clients will increasingly expect.

Not sure? The free Scope Check tells you in minutes →

Still not sure after the Scope Check? Email info@aztecaicompliance.com. We will give you a straight answer or refer you to a solicitor if your situation is complex.
What you get

Every document you need, ready to complete

Written in plain English, no legal jargon, with a Start Here Guide that walks you through the steps in order, and an Intake Form & Scope Check that confirms which tier fits your business.

  • AI Usage Policy: the rulebook for what AI may and may not be used for
  • AI Register: a live inventory of every AI tool, its purpose and risk
  • AI Risk Triage Record: evidence each tool was assessed and classified
  • AI Literacy Briefing + Training Record: staff training material and signed proof (Article 4)
  • AI Transparency Notices: ready-to-publish disclosure wording (Article 50, Tier 2)
  • AI Supplier Checklist: due diligence before adopting any new AI tool
  • Policy Review Log + Completion Checklist: proof it's kept current and done
  • EU AI Act Compliance Statement: a one-page position statement for clients and auditors

12 months of updates included free as the Commission's guidance evolves.

How it works

Three steps, done in a day

1

Check your scope

Take the free Scope Check. It tells you whether the EU AI Act reaches your business and which tier fits, before you spend a penny.

2

Get your pack

Buy the tier the Scope Check points you to. Instant download, every template included, plain-English instructions throughout.

3

Put it in place

Work through the Start Here Guide. Most businesses complete the pack in a day. Keep the completed documents as your evidence file.

Pricing

Choose your pack

⚠  Before You Purchase These document packs are templates for general guidance only and do not constitute legal advice. Please ensure you have read our full Legal Notices & Disclaimer before buying. If you have any questions about which tier is right for you, or would like to speak to a solicitor before purchasing, email info@aztecaicompliance.com. We are happy to help.
Free Scope Check
Find your tier in minutes, and route honestly to specialist advice if that's what you actually need.
Start the free Scope Check

Tier 1: Essentials

For low-risk businesses using AI tools

£149 incl. VAT

  • The full governance baseline: 11 documents
  • Policy, register, risk triage, staff training
  • Audit-ready compliance statement
  • 12 months of updates included
Buy Tier 1: £149

Tier 2: Transparency

For AI that interacts with people or creates content they see

£269 incl. VAT

  • Everything in Tier 1, upgraded: 13 documents
  • Article 50 transparency notices, ready to publish
  • Deepfake & AI-content disclosure rules for staff
  • 12 months of updates included
Buy Tier 2: £269

Tier 3: High-Risk

High-risk AI deployers (Annex III uses)

£599 incl. VAT

  • Everything in Tier 2, upgraded
  • DPIA (Data Protection Impact Assessment)
  • Bias & Fairness Record
  • High-Risk Compliance Statement
  • 12 months of updates included
Buy Tier 3: £599

Tier 4: Provider

Businesses that build or sell AI

£999 incl. VAT

  • Everything in Tier 3, upgraded
  • Declaration of Conformity (DoC)
  • Serious Incident Reporting Template
  • Provider Cheat Sheet
  • 12 months of updates included
Buy Tier 4: £999

Already bought Tier 1? Upgrade to Tier 2 for £120, the difference, nothing more. Email info@aztecaicompliance.com with your order confirmation and we will send your upgrade code. Specialist consultancy for the same ground typically starts in the thousands. Aztec gives you the structured foundation for a fraction of that.

Have a promotional code? You can enter it at checkout on the Payhip payment page. Codes are case-sensitive: enter exactly as provided. Questions about a code? Email info@aztecaicompliance.com.
What Clients Say

Testimonials

Real feedback from people who have used the free Scope Check or a compliance pack. If you've bought a pack, run the Scope Check, or worked with us in any way, we would love to hear how it went, whenever suits you.

Leave a Testimonial

Takes about a minute. You can leave one straight after your Scope Check, after receiving your pack, or any time later.

Thank you, your testimonial has been received. We read every one and really appreciate you taking the time.

Your email is never published, only used if we need to follow up. See our Privacy Policy for how we handle your data.

Why Aztec

AI Compliance Made Simple

  • Genuinely plain English: written for business owners, not lawyers
  • UK-focused: built for UK businesses with EU reach, covering UK GDPR and EU AI Act overlaps other packs miss
  • A Scope Check that routes you honestly: if you need specialist advice instead, we tell you up front
  • Research-backed and current: maintained against the Act, the Commission's 2026 guidance and the incoming Code of Practice
  • 12 months of updates included: as the rules settle, your pack stays current
Not sure if Aztec is right for your organisation? Email info@aztecaicompliance.com with a brief description of how you use AI and we will come back to you within 2 business days, with a straight answer, not a sales pitch. We are also happy to refer you to an independent solicitor if your situation requires bespoke legal advice.
Questions

Frequently Asked Questions

Does the EU AI Act apply to me?

Does the EU AI Act really apply to a UK business?

Yes. If your business uses, develops, or deploys AI systems and either operates in the EU, serves EU customers, or uses AI tools provided by EU-regulated suppliers, the EU AI Act is likely to affect you. Even purely UK-based businesses using common AI tools such as Microsoft Copilot, ChatGPT, or automated decision-making systems should be aware of their obligations. The prohibited-practices and AI-literacy rules have applied since 2 February 2025, and transparency obligations are in force since 2 August 2026, so for most in-scope businesses, duties already apply now. Not sure whether it applies to you? Take our free EU AI Act Scope Check or email info@aztecaicompliance.com. We will give you a straight answer.

I only use ChatGPT or Microsoft Copilot: do I really need compliance documents?

Possibly yes. If you use AI tools to make decisions that affect customers, employees, or third parties, for example in recruitment, credit assessment, customer service, or risk management, you may have obligations under the EU AI Act regardless of whether you built the AI yourself. Our Free Scope Check will tell you in minutes. If you are still unsure after completing it, email info@aztecaicompliance.com and we will help you work it out.

I am a financial services firm: does this apply to me specifically?

Yes. Financial services is one of the sectors most affected by the EU AI Act. Uses of AI in credit scoring, fraud detection, customer onboarding, risk assessment, and investment decisions may all fall within scope. Our document packs are written with financial services organisations in mind alongside other regulated sectors. If you have sector-specific questions before purchasing, email info@aztecaicompliance.com and we will respond within 2 business days.

What if my AI use is high-risk: credit scoring, recruitment, underwriting?

The Scope Check flags this up front. High-risk AI use carries heavier obligations under the EU AI Act. Our Tier 3 pack provides the structured foundation for high-risk deployers. We are also clear that high-risk and provider cases usually also benefit from specialist legal advice alongside the templates. We would rather tell you that before you purchase than after. Email info@aztecaicompliance.com if you would like us to refer you to a specialist solicitor.

I am FCA-regulated. Is this pack enough?

The pack gives you the AI governance baseline, but regulated firms also face FCA expectations under Consumer Duty, SM&CR and SYSC where a Senior Manager is personally accountable for AI outcomes. The Scope Check flags this, and we recommend specialist input alongside the pack for FCA-regulated businesses. Email info@aztecaicompliance.com and we can refer you to an appropriate solicitor or specialist.

Which tier do I need?

I do not know which tier is right for my organisation: where do I start?

Start with our Free EU AI Act Scope Check. It takes approximately five minutes and tells you which tier is appropriate for your organisation based on how you use AI. Complete it free. If after completing it you are still unsure, email info@aztecaicompliance.com and we will point you in the right direction at no charge.

What is the difference between the tiers?

Tier 1 covers the core compliance foundation: AI Policy, AI Register, Risk Triage, Staff Training materials, Transparency Notices, and a Compliance Statement. Suitable for most small and medium businesses using standard AI tools.

Tier 2 adds the documents required if your AI interacts with people or produces content they see, including Article 50 Transparency Notices and Deepfake disclosure rules.

Tier 3 covers high-risk AI deployers. Tier 4 covers businesses that build or sell AI products. If you bought Tier 1 and later need Tier 2, you only pay the difference. Email info@aztecaicompliance.com with your order confirmation for your upgrade code.

Can I upgrade after purchasing a lower tier?

Yes. Existing customers can upgrade at any time and pay only the price difference between tiers. Email info@aztecaicompliance.com with your original order confirmation and we will send you a discount code to apply at checkout on the higher tier product page.

Are these documents legally sufficient?

Is this legal advice?

No. Aztec AI Compliance provides plain-English templates and general information: not legal advice, a certification, or a guarantee of compliance. The pack helps you put governance in place and demonstrate responsible AI use. For legal advice specific to your organisation, you should consult a qualified solicitor. We are happy to refer you to one. Email info@aztecaicompliance.com.

Will these templates be enough or do I also need a solicitor?

For most small and medium businesses using standard AI tools, our Tier 1 pack provides a solid, practical compliance foundation. However, if your AI use is complex, high-risk, or you are subject to additional regulatory oversight, for example in financial services, healthcare, or the public sector, we strongly recommend seeking independent legal advice alongside the pack. We are happy to refer you to a solicitor. Email info@aztecaicompliance.com.

Are the documents legally up to date?

Yes. Our documents are kept aligned with the EU AI Act as amended, including the EU AI Act Digital Omnibus (Regulation (EU) 2026/1744, in force since 27 July 2026). We review and update the packs when significant regulatory changes occur, and 12 months of updates are included with every purchase. If you have purchased a pack and believe an update is needed, email info@aztecaicompliance.com.

Purchasing, delivery and refunds

What do I actually receive and how is it delivered?

An instant digital download containing every document in your tier, plus the Start Here Guide. Documents are delivered as Word files so you can customise them for your organisation. You receive your secure download link immediately after payment via an automated email from Payhip. If you do not receive your link within 10 minutes, check your spam folder or email info@aztecaicompliance.com.

Is my payment secure?

Yes. All payments are processed securely by Payhip using Stripe. Aztec AI Compliance does not store your payment card details. Payhip automatically handles UK and EU VAT on your behalf so the price you see is the price you pay.

Can I get a refund?

Yes. We back every pack with a 14 Day Money Back Guarantee. If it isn't right for you, email info@aztecaicompliance.com within 14 days of purchase and we will refund you in full, no quibble. This is in addition to your statutory rights: under the Consumer Contracts Regulations 2013, your right to cancel ends when you download the digital files, so our guarantee is what covers you after that point.

I need to speak to someone before I buy: can I do that?

Absolutely. Email info@aztecaicompliance.com with a brief description of your organisation and how you use AI and we will come back to you within 2 business days. If your question requires legal advice, we are also happy to refer you to an independent solicitor at no charge.

What happens after I buy: do I get ongoing support?

You receive your download link immediately, plus a welcome email with the recommended order of work. Updates for the next 12 months are included. If you have questions about implementing any document in your pack, email info@aztecaicompliance.com. We aim to respond within 2 business days. Where your question requires legal advice specific to your organisation, we will refer you to an independent solicitor.

Regulations are already live

Key obligations are already in force

Get your AI governance in place now, and have the evidence ready when clients, auditors or regulators ask.

Start with the free Scope Check Get your compliance pack
Have a question before you commit? Email info@aztecaicompliance.com. We respond within 2 business days and can refer you to a solicitor if your situation requires independent legal advice.