AI Compliance

From single tools to AI agents

Companies no longer treat artificial intelligence as a tool for drafting text. AI systems now work across many processes at once: they serve customers, analyse documents and data, prepare reports, and write and test code.

The next stage is AI agents – systems that carry out multi-step tasks on their own. An agent uses e-mail and calendars, CRM and ERP systems, runs scripts and manages cloud resources and IT infrastructure. More and more organisations entrust entire processes to agents, while people supervise their work and take the key decisions.

Why companies deploy AI at scale

• Faster handling of repetitive processes – documents, tickets, settlements.
• Teams focus on work that requires judgement and experience.
• Analysis of large volumes of data and documents in a short time.
• Round-the-clock service for customers and systems.
• Automated IT infrastructure monitoring, incident response and resource scaling.
• Competitive advantage – lower costs, shorter lead times, new services.

Organisations that postpone AI adoption risk competitors working faster and at lower cost. At the same time, deploying AI without a legal assessment can lead to fines, customer disputes or data leaks.

AI agents – legal questions to answer before deployment

• Who is responsible for the agent's actions towards customers, business partners and authorities.
• Which systems, data and operations the agent can access, and which actions require human approval.
• Which personal data and trade secrets the agent and its provider process.
• How to secure systems and log the agent's actions – including under cybersecurity rules.
• Which AI Act obligations apply – human oversight, transparency, informing employees.
• What contracts with providers of models and agent platforms should contain.

How we help

We help organisations deploy AI quickly and lawfully. We assess the planned deployment and prepare the rules for agents – scope of permissions, human oversight, logging – as well as policies, vendor contracts and the documentation required by the AI Act and the GDPR, so that AI can be used at scale without the risk of fines and disputes.

AI Act timeline

The prohibitions of AI practices and the AI literacy obligation have applied since 2 February 2025, and the obligations for providers of general-purpose AI models since 2 August 2025. The Article 50 transparency obligations apply from 2 August 2026. Following the Digital Omnibus, obligations for high-risk systems listed in Annex III apply from 2 December 2027, and for AI systems in products covered by Annex I from 2 August 2028.