Do I Need an Authorized Representative for My AI Model If I'm Based Outside the EU?

• Non-EU providers of high-risk AI systems or general-purpose AI models must appoint an EU representative (Articles 22 & 54).
• Requirement applies before placing the AI system/model on the EU market.
• Fines for non-compliance can reach €15 million or 3% of global turnover.
• The representative keeps compliance documentation and acts as your legal contact.
• Some providers offer multi-lingual notices, registers, and public verification.
• Not needed if you only use internal AI tools with no EU user contact.

Updated 20 October 2026 · 11 sources checked

Providers compared

Prices as published on each provider's website on 20 October 2026, excluding VAT unless stated. Each row links to its source.

What the Law Requires: Articles 22 and 54 Explained

The EU AI Act imposes clear obligations on non-EU companies that wish to make their AI systems or models available in the European Union. The law follows the AI, not the server location or company headquarters. If people in the EU interact with your AI system or its outputs, you are subject to the Act, regardless of where your business is based.

Specifically, Article 22 requires non-EU providers of high-risk AI systems—such as those used in employment, credit, education, biometrics, or safety—to appoint an authorized representative established in the EU before placing the system on the market. Article 54 extends this requirement to non-EU providers of general-purpose AI models (GPAI), which are models that can be adapted for a wide range of tasks and are not limited to a single application.

The authorized representative is a person or entity in the EU who acts as your legal stand-in for a defined set of duties. This includes holding your technical documentation, making it available to authorities, and cooperating on compliance and corrective actions. The representative is not a consultant or reseller, but a legal contact for regulatory matters. They must keep records for 10 years and can terminate the mandate if you act contrary to the Act, informing authorities immediately.

If you fail to appoint an authorized representative, you risk fines up to €15 million or 3% of your worldwide turnover, and your product may be refused by importers, distributors, or platforms. The obligation applies before launch—meaning you cannot legally market or distribute your AI system or model in the EU without this appointment.

Included / Not Included / Extra Fees Table

How to Choose the Right Authorized Representative

Choosing the right EU AI Act representative is a strategic compliance decision. Not all providers offer the same level of service or transparency. Here’s what to consider:

• Scope of Service: Does the provider cover both high-risk systems (Article 22) and general-purpose AI models (Article 54)? Some, like REP27, explicitly cover both, while others may focus on one area.
• Documentation Management: The representative must hold your technical documentation and declaration of conformity for 10 years. Confirm if the provider has secure processes for this and if they help with updates or only initial storage.
• Transparency Notices: Some providers, such as REP27, include multi-lingual (up to 8 languages) transparency notices and guidance on placement. Others may offer this only on request or not at all, which can be critical for customer-facing systems.
• Public Verification: A verifiable certificate or public badge can be important for platform onboarding and customer trust. REP27 includes this; others may not.
• Support and Responsiveness: How quickly does the provider forward authority or data subject requests? REP27 commits to forwarding within 2 business days. This can be crucial in regulatory investigations.
• Price Structure: Check if the price is per system/model, per company, or includes extra fees for additional services. Renewal prices may differ from the first year.

Decision Matrix

Always check the provider’s contract for exclusions, notice periods, and liability limits. Some may charge per request or per system, so clarify these details before signing.

What the Price Really Includes (and Hidden Costs)

Published prices for EU AI Act authorized representative services vary widely, and the scope of what’s included can differ even more. For example, REP27’s €1,490/year plan (renewal €1,190) includes the legal mandate, technical documentation holding, multi-lingual transparency notices, a public verification certificate, a request desk, an AI system register, and a Swiss nFADP assessment at no extra cost. Other providers may only offer the legal mandate and basic documentation holding, with notices, registers, or additional services available only on request or for extra fees.

Some key points to check before you buy:

• Are transparency notices included, and in how many languages? This is crucial for customer-facing AI systems.
• Is the AI system register included? This helps track compliance across multiple systems or models.
• Are there extra fees for each AI system/model, or for each request from authorities? Some providers charge per system or per authority contact.
• Is public verification (certificate, badge, QR code) included? This can be important for platform onboarding and trust.
• Are renewal prices lower, higher, or the same as the first year? REP27 offers a lower renewal rate; others may not disclose renewal pricing.
• Is Swiss representation or assessment included? REP27 includes a Swiss nFADP assessment with every paid EU plan, valuable for companies with Swiss exposure.

Always request a detailed breakdown of what is and isn’t included. If a provider’s price is “on request,” clarify if it covers all your systems and what support is provided in case of authority inquiries or audits.

How Appointment Works: Step by Step

Appointing an EU AI Act authorized representative is a structured process designed to ensure you meet legal requirements before entering the EU market. Here’s how it typically works, with practical detail from leading providers:

1. Assess Your Obligation: Determine if your AI system is high-risk (Article 22) or a general-purpose model (Article 54), and if you intend to place it on the EU market. Use provider checklists or free assessment tools where available.
2. Compare Providers: Review published prices, included services, and contract terms. Consider whether you need multi-lingual notices, public verification, or a register for multiple systems.
3. Gather Documentation: Prepare your technical documentation and, if required, a declaration of conformity. The representative will hold these for 10 years and provide them to authorities on request.
4. Onboard with Your Chosen Provider: Complete their onboarding process, which may include an online form, risk classification, and details about your AI systems and EU market exposure.
5. Sign the Mandate: The law requires a written mandate. Providers like REP27 issue this with an eIDAS electronic signature, and some offer instant or 24-hour designation.
6. Receive Your Certificate and Notices: The provider issues a verifiable certificate, public badge, and, if included, multi-lingual transparency notices and register entries.
7. Publish Notices and Maintain Compliance: Place required transparency notices on your website, app, or product, and keep your documentation and register up to date. The representative will forward authority or data subject requests and help you respond as needed.

Providers like REP27 also include a Swiss nFADP assessment, which can clarify if you need a Swiss representative. Others may require additional steps or manual review, especially for complex or high-risk systems.

Risks, Fines, and What Providers Usually Do Not Say

The risks of non-compliance with the EU AI Act are significant. If you fail to appoint an authorized representative before placing your AI system or model on the EU market, you face fines up to €15 million or 3% of global turnover. Importers, distributors, and platforms may refuse to carry your product, and you could lose access to the EU market entirely.

The authorized representative is required to keep your technical documentation and declaration of conformity available for authorities, cooperate on corrective actions, and respond to requests. They can terminate the mandate if you act contrary to the Act and must inform authorities immediately. This means your compliance is not just a formality—it is actively monitored and enforced.

What providers usually do not say:

• Some charge extra per AI system/model or per authority request. Always clarify if the published price is all-inclusive.
• Not all providers include multi-lingual notices, public verification, or an AI system register. These may be critical for customer-facing systems or platform onboarding.
• Renewal fees may differ from first-year rates. REP27, for example, offers a lower renewal price, but others may not disclose this upfront.
• The representative is not responsible for technical conformity assessment or fixing your compliance gaps. They only act as your legal contact and documentation holder.
• Notice periods and liability limits vary. Some providers may have strict termination clauses or limited liability in the contract—always review these carefully.

Ultimately, the representative is a legal requirement, not a compliance consultant. You remain responsible for ensuring your AI system or model meets all technical and legal requirements of the EU AI Act.

Checklist: How to Appoint an EU AI Act Representative Today

1. Determine Your Scope: Is your AI system high-risk or a general-purpose model? Are you targeting the EU market?
2. Review Providers: Compare published prices, included services, and contract terms. Look for multi-lingual notices, public verification, and register management if needed.
3. Prepare Documentation: Gather your technical documentation and declaration of conformity. Ensure it is up to date and meets EU requirements.
4. Contact Providers: Reach out to shortlisted providers and clarify any questions about scope, extra fees, and support.
5. Complete Onboarding: Fill in onboarding forms, provide system details, and classify your AI system as required.
6. Sign the Mandate: Execute the written mandate with your chosen provider. Ensure you receive a verifiable certificate or badge.
7. Publish Notices: Implement required transparency notices on your website, app, or product. Use provider guidance for placement and language.
8. Maintain Compliance: Keep your documentation and register updated. Respond promptly to authority or data subject requests forwarded by your representative.
9. Renew Annually: Track renewal dates and ensure your mandate and documentation remain current.

This checklist will help you navigate the process efficiently and avoid common pitfalls.

Realistic Scenarios: What Applies and How to Comply

• US SaaS with AI chatbot for EU users: The company is based outside the EU and offers an AI chatbot that interacts with EU users. Under Article 50, transparency notices are required, and if the chatbot is a general-purpose model or high-risk system, Articles 22 and/or 54 apply. The company must appoint an EU authorized representative before launch. REP27 or any listed provider can fulfill this role, with REP27 offering multi-lingual notices and public verification.
• Chinese Amazon seller using AI for product recommendations in the EU: If the AI system is high-risk (e.g., biometric identification, credit scoring) or a general-purpose model, the seller must appoint an EU representative. This is also true for sellers on platforms like Etsy or eBay. Choose a provider experienced with marketplace sellers and clarify if the price covers multiple products or systems. Transparency notices and public verification may be needed for platform onboarding.
• UK online shop using AI for internal analytics only: If the AI is used solely for internal purposes and does not interact with or output to EU users, no authorized representative is required under the EU AI Act. However, if the shop later deploys customer-facing AI features for EU users, the obligation will apply and a representative must be appointed before launch.

These scenarios cover common business models and show how the obligation depends on both the nature of the AI system and its exposure to the EU market.