EU Authorized Representative for AI Outside the Union: Obligations, Prices, and Selection (2026)
- Obligation for non-EU providers of high-risk AI or general-purpose models (Art. 22, 54)
- Not required for internal use or AI without contact with EU public
- Annual prices from €420 to €1,490 (verified October 2026)
- Includes: written mandate, notifications, document retention (10 years)
- Up to €15 million fine for missing representative
- Checklist and practical scenarios to determine if needed
Providers compared
| Provider | Established in | Published price | What the price includes | Best for |
|---|---|---|---|---|
| REP27 — Europe Services, SE | Czech Republic | €1,490/year (renewal €1,190) | AI Act representative mandate (Art. 22, 54), notifications, transparency texts in 8 languages, AI register, document retention 10 years, public badge, response to authority requests. Swiss compliance (nFADP) included. | Non-EU providers of high-risk AI systems or general models seeking EEA and Swiss coverage |
| DPO Europesource | Netherlands | €950/year (first year) | Authorized AI Act representation (details not specified) | Non-EU providers seeking lower entry price |
| Prightersource | Germany | €420/year (Growth) | AI Act representation (details not specified) | Non-EU startups and SMEs with limited budget |
| Engage Compliancesource | United Kingdom | €690/year (Band 0) | AI Act representation (details not specified) | Small non-EU companies |
| CRA-Portalsource | European Union | On request | CRA authorized representation, document retention 10 years, authority interface | Manufacturers also subject to Cyber Resilience Act |
| DataShieldsource | European Union | On request | AI Act representation, document retention, authority interface | AI providers seeking customized service |
| VATAisource | European Union | On request | EU/UK/USA representation, technical documentation management, authority communication | Multi-market AI providers |
| URIEL Consultsource | European Union | On request | CRA representation, document retention, authority interface | Manufacturers subject to Cyber Resilience Act |
Prices as published on each provider's website on 26 October 2026, excluding VAT unless stated. Each row links to its source.
What the Law Requires: Key Articles, Obligations, and Practical Cases
EU Regulation 2024/1689 (AI Act) governs the use and marketing of artificial intelligence systems within the European Union. If your company is established outside the EU and intends to offer AI systems or general-purpose models to European users, you may be required to appoint an authorized representative based in the EU. Here are the main legal references:
- Article 22: Non-EU providers of high-risk AI systems (e.g., for employment, credit, biometrics, security) must appoint an EU authorized representative before making the system available on the EU market (source).
- Article 54: Non-EU providers of general-purpose AI models (GPAI) must appoint an EU representative before placing the model on the market within the Union (source).
- Article 50: All providers (including EU-based) must provide transparent notices to EU users if the AI generates content or interacts with people (chatbots, images, audio, video, deepfakes).
Appointment is not required if:
- The AI is used only internally and does not interact with EU users.
- The activity is pure research, personal use, or non-commercial open source (with some exceptions for high-risk or prohibited systems).
- The company is already established in the EU.
The EU representative is the official contact point for authorities and users, must retain technical documentation and the declaration of conformity for 10 years (source).
Inclusions/Extras Table:
| Provider | Included | Not Included | Extra fee |
|---|---|---|---|
| REP27 | Mandate, texts, register, badge, Switzerland | Audit, tests, technical assessment | On request |
| DPO Europe | Mandate | Details not specified | On request |
| Prighter | Mandate | Details not specified | On request |
| Engage Compliance | Mandate | Details not specified | On request |
| CRA-Portal | Mandate, documents, authorities | Details not specified | On request |
| DataShield | Mandate, documents, authorities | Details not specified | On request |
| VATAi | Mandate, documents, authorities | Details not specified | On request |
| URIEL Consult | Mandate, documents, authorities | Details not specified | On request |
The table shows that only REP27 explicitly declares Swiss coverage (nFADP) and production of public badges and multilingual texts. No provider includes audits or technical tests.
How to Choose the Representative: Decision Matrix, Checklist, and Practical Criteria
Choosing an EU authorized representative for the AI Act depends on various practical and regulatory factors. Not all providers offer the same level of service or price. Here's how to navigate:
- Type of AI: If you offer a general-purpose model (GPAI) or a high-risk system, appointment is mandatory. For chatbots or AI generating content visible to the EU public, at least transparency (Art. 50) is required.
- Country of establishment: Only those outside the EU must appoint a representative. If you have an EU base, it is not required.
- Target market: If the AI is used or sold to EU users (B2C or B2B), the obligation applies. If only internal use or research, no.
- Sales channels: If you sell via marketplaces (Amazon, Etsy, eBay) and the AI is your own, the obligation applies. If you only use platform tools, usually no.
- Budget and additional services: Prices vary widely: from €420 to €1,490/year, with different services (see table). Some providers offer public badges, multilingual texts, Swiss coverage.
Decision matrix:
| If you are… | → Must you appoint a representative? |
|---|---|
| Non-EU AI provider (general model or high-risk) to EU | Yes, mandatory (Art. 22/54) |
| Marketplace seller (Amazon/Etsy/eBay) with own AI to EU | Yes, if you are the system provider |
| Only internal AI user, no output to EU public | No |
| Pure research, personal use, non-commercial open source AI | No |
| EU company | No (but transparency Art. 50 always applies) |
Practical checklist:
- Check if your AI system is high-risk or general-purpose
- Verify if your company is outside the EU
- Assess if AI output reaches EU users (directly or via partners/marketplaces)
- If yes, select provider and gather technical documentation
- Appoint the representative with a written mandate
- Prepare transparent notices (Art. 50) in all required languages
- Retain documents for 10 years
- Check if Swiss coverage (nFADP) is also needed
This checklist helps quickly evaluate if and which representative to appoint, avoiding unnecessary costs or sanction risks.
What the Price Really Includes: Services, Limits, and Hidden Costs
The annual price published by providers generally covers:
- Written mandate as EU representative (Art. 22/54 AI Act)
- Retention of technical documentation and declaration of conformity for 10 years
- Response to requests from authorities and EU users
- Texts for transparent notifications (Art. 50), where declared
- Register of AI systems and annual updates (where applicable)
Practical comparison:
- REP27 includes, in the price, a verifiable public badge, texts in 8 languages, AI register, response to requests within 2 working days, Swiss coverage (nFADP) with assessment and exemption declaration if Swiss representative not needed. Does not include audits, technical tests, conformity assessments (openly declared).
- DPO Europe, Prighter, Engage Compliance declare only representation, without public details on texts, badges, languages, or Switzerland.
- Other providers (CRA-Portal, DataShield, VATAi, URIEL Consult) also offer services for the Cyber Resilience Act but do not specify details on AI transparency or extras.
Hidden costs and limits:
- Audits, technical assessments, or conformity tests are not included by any provider (REP27 declares this, others do not specify).
- Public badge, extra languages, Swiss coverage, or multi-market services may be excluded or charged extra if not explicitly declared.
- Possible extras for updates, out-of-standard requests, multi-market services, or early termination.
- Provider liability always remains with you: the representative is only a contact point.
Always verify in advance what is included and request a written list of services covered by the price.
How Appointment Works: Step by Step with Concrete Examples
Appointing an EU representative for the AI Act follows a precise procedure, which may vary slightly between providers. Here's a detailed guide based on information from REP27 and competitors:
- Choose the provider and plan: Consult the price table and verify which services are included. For example, REP27 offers three plans (transparency, register+transparency, AI Act representative) with increasing prices and services.
- Fill out the onboarding form: You will need to provide company data, description of AI systems, risk classification (high risk/general AI), target markets, sales channels (B2B, B2C, marketplace), and, if requested, answer questions about Switzerland.
- Receive signed mandate and certificate: The provider issues a written mandate (with eIDAS electronic signature for REP27), a publicly verifiable certificate (QR code, badge), and, if applicable, transparency texts in multiple languages.
- Prepare and publish transparency texts: Publish notices provided by the provider on chatbots, generated content, deepfakes, etc. (Art. 50). REP27 also indicates where to place each notice (e.g., first chatbot message, under images, email footer).
- Retain technical documentation: You must keep updated and accessible the technical documentation and declaration of conformity for 10 years. The representative stores and produces it upon authority request.
- Respond to authority requests: The EU representative is the contact point for supervisory authorities and users. REP27 guarantees forwarding requests within 2 working days.
- Renew annually: The appointment is valid for one year and must be renewed. Some providers offer renewals at reduced price.
Practical example: With REP27, designation occurs within 24 hours of payment. On AWS Marketplace, the process is integrated into AWS billing, with no need for new providers.
Risks, Fines, and What Happens If You Don't Appoint a Representative
Failure to appoint an EU representative when mandatory is an independent violation of the AI Act. Authorities can sanction even without other offenses. Here are the concrete risks:
- Administrative fines: Up to 15 million euros or 3% of global turnover for violating transparency or representation obligations (Art. 50 and 54 AI Act). For prohibited practices, fines rise to 35 million or 7%.
- Commercial exclusion: Marketplaces, app stores, and enterprise clients increasingly require proof of appointment and public badge. Absence of a representative can lead to platform exclusion or contract loss, even before fines.
- Requests for clarification: Authorities and clients may request at any time copies of the mandate, transparency texts, and technical documentation. Failure or late response is considered an aggravating factor.
- Notification obligation: From September 11, 2026, non-EU manufacturers must notify EU authorities of the representative appointment (source).
Scenario: A US provider offering a general AI model to EU clients without a representative risks high fines and suspension from marketplaces and loss of key clients. Authorities do not ask if you knew the deadline: they ask where your notices are and who answers for you.
What Providers Usually Don't Say: Exclusions, Limits, and Practical Notices
- Representation covers only formal obligations: Audits, technical tests, and conformity assessments are not included (REP27 declares this, others do not specify). You must engage third parties for these activities.
- Limited liability: The EU representative is only a contact point for authorities and users. Legal responsibility and compliance always remain with the AI provider.
- Public badge, extra languages, Switzerland: Not all providers include verifiable badges, multilingual texts, or Swiss coverage. REP27 offers this; others do not specify.
- Notifications and annual reviews: The obligation to keep transparency texts and AI register updated is annual. Check if the provider includes or charges for this.
- Termination timing and provider change: Some providers may require notice or specific procedures for early termination or representative change. Always check contract terms.
- Multi-market services: If you also sell in UK, USA, or Switzerland, verify if the provider offers combined coverage or if separate representatives are needed.
Always request a written list of included services and exclusions to avoid surprises after appointment.
Practical Scenarios: Obligations and Simplest Compliance Path
- US SaaS Startup: Offers AI chatbots to EU clients via website and API. Must appoint EU representative (Art. 50, 54), publish transparent notices in all required languages, and retain technical documentation for 10 years. Solution: REP27 (EEA+Switzerland coverage, multilingual texts) or Prighter (if budget limited, but no declared public badge).
- Chinese Amazon Seller: Integrates proprietary AI for product recommendations to EU customers. If AI is developed and managed by the seller, appointment is mandatory (Art. 22/54). If only platform tools are used, no. Path: assess if AI is "own" and, if yes, appoint representative and publish notices.
- UK Online Shop: Uses AI only for internal analysis (e.g., warehouse optimization), no output to EU customers. No representative obligation. If in future AI generates content or interacts with EU users, transparency obligation (Art. 50) applies but no representative if company is EU-based.
In all cases, compliance starts from correct AI system classification and target market assessment. The simplest path is:
- Classify your AI (high-risk/general/other)
- Verify if it reaches EU users
- Choose provider and gather documentation
- Appoint representative and publish notices
- Keep documents and notifications updated
When you do not need this
- Companies using only internal AI without output to EU public
- Pure research, personal use, non-commercial open source
- Companies already established in the EU
Frequently asked questions
When is it mandatory to appoint an EU representative for the AI Act?
It is mandatory if your company is outside the EU and provides high-risk AI systems (Art. 22) or general AI models (Art. 54) to users or customers in the EU. Not required for internal use or pure research.
What is the difference between AI Act and GDPR representatives?
The AI Act representative is required for non-EU AI providers offering systems/models in the Union (Art. 22/54). The GDPR representative (Art. 27) concerns only personal data processing. They are distinct roles, often both required.
What happens if I do not appoint the representative?
Failure to appoint is an independent violation, punishable with fines up to €15 million or 3% of global turnover. You can also be excluded from marketplaces, app stores, and public tenders.
Does the representation cover Switzerland?
REP27 includes a free assessment for Switzerland (nFADP). If all conditions are met, a Swiss representative is required (not offered by REP27). Other providers: verify case by case.
How long must technical documentation be retained?
By law, technical documentation and declaration of conformity must be retained for 10 years from the moment the product is placed on the EU market.
Does the service include audits or technical tests?
No, neither REP27 nor other providers declare including audits, technical assessments, or conformity tests. These remain the provider's responsibility.
Can I appoint the representative via AWS Marketplace?
Yes, REP27 offers appointment via AWS Marketplace, with direct AWS billing and the same service as direct sale.
Does the representative respond to authority requests?
Yes, the EU representative is the contact point for authorities and EU users and must respond promptly to official requests.
Do I need to renew the appointment every year?
Yes, the appointment is annual and must be renewed. Some providers offer renewals at a reduced price compared to the first year.
What do I need to provide to the representative for appointment?
Company data, description of AI systems, risk classification, and technical documentation. The provider will guide you in gathering the necessary information.
Do marketplaces like Amazon/Etsy require a representative?
If you sell in the EU with integrated own AI, yes. If you only use platform tools, usually no. Always check marketplace policies.
Is it possible to change the representative during the year?
Yes, but some platforms require notice or specific procedures. Always check the contractual conditions of the chosen provider.
Sources
- REP27 — Europe Services, SE (AI Act) — gdprrepresentative.com
- DPO Europe — Authorised Representative under the EU AI Act — data-privacy-office.eu
- Prighter — EU AI Act General Purpose AI — prighter.com
- Engage Compliance — AI Act Representative — engagecompliance.co
- CRA-Portal — Rappresentante Autorizzato UE — cra-portal.eu
- DataShield — AI Act Representative — datashield-guardian.com
- VATAi — Authorised Representative Services — vatai.com
- URIEL Consult — CRA Representative — cra-representative.eu
Related guides
- How to Compare Authorized AI Act Representatives: Prices & Services
- Authorized Representative Prices for General AI Model Providers
- Compare EU AI Act Authorized Representative Prices for Non-EU
- Best Alternatives to Traditional EU AI Act Authorized Representative
- Do I Need an Authorized Representative for My AI Model Outside the EU?
- EU AI Act Authorised Representative Cost: Providers & 2026 Prices