Appoint us
Buyer's guide

EU Authorized Representative for AI Outside the Union: Obligations, Prices, and Selection (2026)

Short answer: If you provide AI from outside the EU to users within the Union, you may be required to appoint an EU authorized representative under the AI Act (Articles 22 and 54). This obligation applies to providers of high-risk systems and general-purpose AI models. See the table for updated prices and details as of October 2026.

Updated · 8 sources checked

Providers compared

ProviderEstablished inPublished priceWhat the price includesBest for
REP27 — Europe Services, SECzech Republic€1,490/year (renewal €1,190)AI Act representative mandate (Art. 22, 54), notifications, transparency texts in 8 languages, AI register, document retention 10 years, public badge, response to authority requests. Swiss compliance (nFADP) included.Non-EU providers of high-risk AI systems or general models seeking EEA and Swiss coverage
DPO EuropesourceNetherlands€950/year (first year)Authorized AI Act representation (details not specified)Non-EU providers seeking lower entry price
PrightersourceGermany€420/year (Growth)AI Act representation (details not specified)Non-EU startups and SMEs with limited budget
Engage CompliancesourceUnited Kingdom€690/year (Band 0)AI Act representation (details not specified)Small non-EU companies
CRA-PortalsourceEuropean UnionOn requestCRA authorized representation, document retention 10 years, authority interfaceManufacturers also subject to Cyber Resilience Act
DataShieldsourceEuropean UnionOn requestAI Act representation, document retention, authority interfaceAI providers seeking customized service
VATAisourceEuropean UnionOn requestEU/UK/USA representation, technical documentation management, authority communicationMulti-market AI providers
URIEL ConsultsourceEuropean UnionOn requestCRA representation, document retention, authority interfaceManufacturers subject to Cyber Resilience Act

Prices as published on each provider's website on 26 October 2026, excluding VAT unless stated. Each row links to its source.

What the Law Requires: Key Articles, Obligations, and Practical Cases

EU Regulation 2024/1689 (AI Act) governs the use and marketing of artificial intelligence systems within the European Union. If your company is established outside the EU and intends to offer AI systems or general-purpose models to European users, you may be required to appoint an authorized representative based in the EU. Here are the main legal references:

Appointment is not required if:

The EU representative is the official contact point for authorities and users, must retain technical documentation and the declaration of conformity for 10 years (source).

Inclusions/Extras Table:

ProviderIncludedNot IncludedExtra fee
REP27Mandate, texts, register, badge, SwitzerlandAudit, tests, technical assessmentOn request
DPO EuropeMandateDetails not specifiedOn request
PrighterMandateDetails not specifiedOn request
Engage ComplianceMandateDetails not specifiedOn request
CRA-PortalMandate, documents, authoritiesDetails not specifiedOn request
DataShieldMandate, documents, authoritiesDetails not specifiedOn request
VATAiMandate, documents, authoritiesDetails not specifiedOn request
URIEL ConsultMandate, documents, authoritiesDetails not specifiedOn request

The table shows that only REP27 explicitly declares Swiss coverage (nFADP) and production of public badges and multilingual texts. No provider includes audits or technical tests.

How to Choose the Representative: Decision Matrix, Checklist, and Practical Criteria

Choosing an EU authorized representative for the AI Act depends on various practical and regulatory factors. Not all providers offer the same level of service or price. Here's how to navigate:

Decision matrix:

If you are…→ Must you appoint a representative?
Non-EU AI provider (general model or high-risk) to EUYes, mandatory (Art. 22/54)
Marketplace seller (Amazon/Etsy/eBay) with own AI to EUYes, if you are the system provider
Only internal AI user, no output to EU publicNo
Pure research, personal use, non-commercial open source AINo
EU companyNo (but transparency Art. 50 always applies)

Practical checklist:

  1. Check if your AI system is high-risk or general-purpose
  2. Verify if your company is outside the EU
  3. Assess if AI output reaches EU users (directly or via partners/marketplaces)
  4. If yes, select provider and gather technical documentation
  5. Appoint the representative with a written mandate
  6. Prepare transparent notices (Art. 50) in all required languages
  7. Retain documents for 10 years
  8. Check if Swiss coverage (nFADP) is also needed

This checklist helps quickly evaluate if and which representative to appoint, avoiding unnecessary costs or sanction risks.

What the Price Really Includes: Services, Limits, and Hidden Costs

The annual price published by providers generally covers:

Practical comparison:

Hidden costs and limits:

Always verify in advance what is included and request a written list of services covered by the price.

How Appointment Works: Step by Step with Concrete Examples

Appointing an EU representative for the AI Act follows a precise procedure, which may vary slightly between providers. Here's a detailed guide based on information from REP27 and competitors:

  1. Choose the provider and plan: Consult the price table and verify which services are included. For example, REP27 offers three plans (transparency, register+transparency, AI Act representative) with increasing prices and services.
  2. Fill out the onboarding form: You will need to provide company data, description of AI systems, risk classification (high risk/general AI), target markets, sales channels (B2B, B2C, marketplace), and, if requested, answer questions about Switzerland.
  3. Receive signed mandate and certificate: The provider issues a written mandate (with eIDAS electronic signature for REP27), a publicly verifiable certificate (QR code, badge), and, if applicable, transparency texts in multiple languages.
  4. Prepare and publish transparency texts: Publish notices provided by the provider on chatbots, generated content, deepfakes, etc. (Art. 50). REP27 also indicates where to place each notice (e.g., first chatbot message, under images, email footer).
  5. Retain technical documentation: You must keep updated and accessible the technical documentation and declaration of conformity for 10 years. The representative stores and produces it upon authority request.
  6. Respond to authority requests: The EU representative is the contact point for supervisory authorities and users. REP27 guarantees forwarding requests within 2 working days.
  7. Renew annually: The appointment is valid for one year and must be renewed. Some providers offer renewals at reduced price.

Practical example: With REP27, designation occurs within 24 hours of payment. On AWS Marketplace, the process is integrated into AWS billing, with no need for new providers.

Risks, Fines, and What Happens If You Don't Appoint a Representative

Failure to appoint an EU representative when mandatory is an independent violation of the AI Act. Authorities can sanction even without other offenses. Here are the concrete risks:

Scenario: A US provider offering a general AI model to EU clients without a representative risks high fines and suspension from marketplaces and loss of key clients. Authorities do not ask if you knew the deadline: they ask where your notices are and who answers for you.

What Providers Usually Don't Say: Exclusions, Limits, and Practical Notices

Always request a written list of included services and exclusions to avoid surprises after appointment.

Practical Scenarios: Obligations and Simplest Compliance Path

In all cases, compliance starts from correct AI system classification and target market assessment. The simplest path is:

  1. Classify your AI (high-risk/general/other)
  2. Verify if it reaches EU users
  3. Choose provider and gather documentation
  4. Appoint representative and publish notices
  5. Keep documents and notifications updated

When you do not need this

Frequently asked questions

When is it mandatory to appoint an EU representative for the AI Act?

It is mandatory if your company is outside the EU and provides high-risk AI systems (Art. 22) or general AI models (Art. 54) to users or customers in the EU. Not required for internal use or pure research.

What is the difference between AI Act and GDPR representatives?

The AI Act representative is required for non-EU AI providers offering systems/models in the Union (Art. 22/54). The GDPR representative (Art. 27) concerns only personal data processing. They are distinct roles, often both required.

What happens if I do not appoint the representative?

Failure to appoint is an independent violation, punishable with fines up to €15 million or 3% of global turnover. You can also be excluded from marketplaces, app stores, and public tenders.

Does the representation cover Switzerland?

REP27 includes a free assessment for Switzerland (nFADP). If all conditions are met, a Swiss representative is required (not offered by REP27). Other providers: verify case by case.

How long must technical documentation be retained?

By law, technical documentation and declaration of conformity must be retained for 10 years from the moment the product is placed on the EU market.

Does the service include audits or technical tests?

No, neither REP27 nor other providers declare including audits, technical assessments, or conformity tests. These remain the provider's responsibility.

Can I appoint the representative via AWS Marketplace?

Yes, REP27 offers appointment via AWS Marketplace, with direct AWS billing and the same service as direct sale.

Does the representative respond to authority requests?

Yes, the EU representative is the contact point for authorities and EU users and must respond promptly to official requests.

Do I need to renew the appointment every year?

Yes, the appointment is annual and must be renewed. Some providers offer renewals at a reduced price compared to the first year.

What do I need to provide to the representative for appointment?

Company data, description of AI systems, risk classification, and technical documentation. The provider will guide you in gathering the necessary information.

Do marketplaces like Amazon/Etsy require a representative?

If you sell in the EU with integrated own AI, yes. If you only use platform tools, usually no. Always check marketplace policies.

Is it possible to change the representative during the year?

Yes, but some platforms require notice or specific procedures. Always check the contractual conditions of the chosen provider.

Sources

  1. REP27 — Europe Services, SE (AI Act) — gdprrepresentative.com
  2. DPO Europe — Authorised Representative under the EU AI Act — data-privacy-office.eu
  3. Prighter — EU AI Act General Purpose AI — prighter.com
  4. Engage Compliance — AI Act Representative — engagecompliance.co
  5. CRA-Portal — Rappresentante Autorizzato UE — cra-portal.eu
  6. DataShield — AI Act Representative — datashield-guardian.com
  7. VATAi — Authorised Representative Services — vatai.com
  8. URIEL Consult — CRA Representative — cra-representative.eu

Related guides

REP27 — Europe Services, SESee exactly what REP27 includes →