EU AI Act and GDPR representation, on an annual licence

Your European
AI Officer.

One licensed mandate that gives your US or UK company a named EU representative under the AI Act and GDPR, an external AI governance officer, and a person on the ground who answers when Europe asks.

No charge for the call. If you don't need a representative, we'll tell you.

14 yearsof EU law, including inside the European Commission
5,000+EU law advisories delivered through Your Europe Advice
1 unicornlegal foundations of Croatia's first, built in-house
1 personwho signs, answers and stays. No rotating junior team.
The problem

The EU AI Act doesn't care where you're incorporated.

If your AI system reaches the EU market, the regulation applies to you. Providers established outside the EU must appoint an authorised representative inside the Union before placing high-risk or general-purpose AI on the market. GDPR has required an EU representative for non-EU controllers since 2018.

Most US and UK teams discover this the same way: a European enterprise customer's procurement questionnaire asks for an AI Act role classification and the name of your EU representative. That's usually the moment a deal stalls.

The commodity answer is a mailbox-style representative service. The commodity answer doesn't classify your system, doesn't train your team, and doesn't pick up the phone when a regulator writes.

What the licence covers

Four things. One mandate. One person.

A licence is an annual appointment. You get a named European AI Officer, not a portal login.

01

Representation

Formal appointment as your EU representative under Art. 22 AI Act and Art. 27 GDPR. Named in your documentation and contracts, with a European address and a person behind it.

02

Readiness

Your AI inventory, AI Act role and risk classification (provider, deployer, GPAI), GDPR gap check, and a written readiness memo you can hand to customers and investors, in the first 30 days.

03

Governance

Policies, technical documentation templates, transparency notices, vendor and customer clauses, FRIA where needed, and the AI literacy training the Act requires for your team.

04

Ongoing

Monthly check-ins, review of new AI features before launch, regulatory watch translated into "what this means for you", and customer or authority correspondence handled.

The licence

Annual licence. Three levels.

Billed monthly on a 12-month term. Every level includes the representative mandate, because that's the part you legally cannot do yourself.

Essential

Startups shipping AI features to EU users
€1,500/ month

  • EU representative, AI Act & GDPR
  • Readiness assessment & memo
  • 4 advisory hours / month
  • Quarterly feature review
  • 1 AI literacy session / year
  • Monthly regulatory briefing
Start with Essential

Enterprise

Companies building GPAI or high-risk systems
€7,500/ month

  • Everything in Standard
  • 20 advisory hours / month
  • FRIA & conformity roadmap
  • Unlimited feature reviews
  • Custom AI literacy program
  • Weekly regulatory briefing
Talk about Enterprise

Governance, representation, training and monitoring are delivered by AI Arena. Where a matter requires formal legal advice, we bring in qualified counsel, ours or yours, under a separate engagement. Licence fees exclude VAT where applicable.

How it works

From first call to named representative in 30 days.

Week 0

Scoping call

30 minutes. We tell you your AI Act role, whether you need a representative at all, and which licence fits. If the answer is "you don't", you'll hear it.

Week 1

Mandate signed

Written mandate, licence agreement, and your representative's details ready to go into your privacy notice, technical documentation and customer contracts.

Weeks 2–4

Readiness

AI inventory, classification, GDPR gap check, readiness memo. Your team gets its first AI literacy session.

Ongoing

Your officer

Monthly check-ins, feature reviews, regulatory watch, and one phone number for customers, partners and authorities in Europe.

Katarina Bulić Bestulić
Your officer

Katarina Bulić Bestulić

EU-qualified lawyer with 14 years in EU law, including inside the European Commission and Croatian regional offices in Brussels. Early in her career she built the legal foundations of Infobip, Croatia's first unicorn, so she knows what a fast-moving product company needs from its counsel: speed, plain English, and no surprises.

5,000+ EU law advisories delivered through the European Commission's Your Europe Advice service. Speaker in New York, London, Geneva and Amsterdam. Founder of AI Arena. Works in English, Italian and Croatian.

EU AI ActGDPRAIGP (in progress)CIPP/E (in progress)
For US and UK law firms

The EU layer your clients keep asking for, without opening an office in Europe.

You stay lead counsel. AI Arena holds the representative mandate your firm cannot, handles the EU governance layer, and refers every piece of US or UK legal work straight back to you.

Talk about a referral partnership

Questions we get on the first call.

We already have a small sales office in Europe. Doesn't that cover it?

Usually not. A sales office is rarely the entity that places the AI system on the market or controls the personal data. The obligation attaches to the provider or controller, not to whoever has a desk in Dublin.

Why not a mailbox representative for a few hundred euros?

You can, and for some companies that's enough. A mailbox won't classify your system, won't answer your customer's procurement questionnaire, and won't call you when a market surveillance authority writes. If you only need the name, we'll say so on the call.

Is this legal advice?

The licence covers governance, representation, training and monitoring. When a matter calls for a formal legal opinion or representation before an authority, that's a separate engagement with qualified counsel, ours or the firm you already work with.

What does the representative actually take on?

Verifying your conformity documentation, keeping it available to authorities for the required period, and cooperating with them on request. The mandate, liability limits and insurance are set out in the licence agreement before you sign.

Find out in 30 minutes whether Europe needs a name from you.

We'll tell you your AI Act role, whether you need a representative, and what it would cost. No charge. If you don't need us, we'll say so.

Book a scoping call

AI Arena is operated by GES j.d.o.o., Pula, Croatia, European Union.

HR EN

All The Tools You Need To Build A Successful Online Business

All The Tools You Need To Build A Successful Online Business

Lorem ipsum dolor sit amet, metus at rhoncus dapibus, habitasse vitae cubilia odio sed. Mauris pellentesque eget lorem malesuada wisi nec, nullam mus. Mauris vel mauris. Orci fusce ipsum faucibus scelerisque.