EU AI Act Authorised Representative Cost: Providers & 2026 Prices

• Required for non-EU providers of high-risk AI systems or general-purpose AI models (Articles 22, 54)
• 2026 prices: REP27 — EUR 1,490; Prighter — EUR 420; Engage Compliance — EUR 690; DPO Europe — EUR 950
• REP27 includes multi-language notices, public verification, and documentation holding
• Internal-only AI use is generally exempt from the representative requirement
• Fines for non-compliance can reach €15 million or 3% of global turnover
• No provider listed includes conformity assessment or technical testing

Updated 20 October 2026 · 6 sources checked

Providers compared

Prices as published on each provider's website on 20 October 2026, excluding VAT unless stated. Each row links to its source.

What the EU AI Act Requires: Who Needs an Authorised Representative?

The EU AI Act (Regulation (EU) 2024/1689) introduces a risk-based approach to regulating artificial intelligence in the European Union. Two key articles—Article 22 and Article 54—set out the requirement for non-EU providers to appoint an authorised representative in the EU before placing certain AI systems or models on the EU market. Specifically, providers established outside the EU must appoint a representative if they:

• Place high-risk AI systems on the EU market (Article 22)
• Place general-purpose AI models on the EU market (Article 54)

The authorised representative acts as the official point of contact for EU authorities, holds technical documentation, and is responsible for cooperating with authorities on corrective actions (Article 22(3)). The representative can terminate the mandate if the provider acts contrary to the Act and must inform the authorities (Article 22(4)).

Importantly, the law follows the AI’s output and its impact in the EU, not the server location or company headquarters. This means that any provider, deployer, importer, or distributor placing AI systems or general-purpose AI models on the EU market—regardless of where the company is based—may be subject to these requirements. Internal-only AI use (where the AI is not accessible by or does not impact EU users) is generally exempt from the authorised representative requirement.

Penalties for non-compliance are severe: fines can reach up to €15 million or 3% of global turnover (Article 99). In addition to regulatory fines, lack of compliance can result in commercial consequences, such as removal from platforms or loss of business partners who increasingly require proof of compliance.

How to Choose an EU AI Act Representative: Practical Criteria and Decision Matrix

Choosing the right EU AI Act authorised representative is a critical compliance decision. Not all providers offer the same scope, support, or transparency. Here are key criteria to consider:

• Published price and renewal terms: Transparent pricing helps avoid hidden costs and plan your compliance budget.
• Scope of service: Does the provider include multi-language transparency notices, public verification, a signed certificate, and a register of your AI systems?
• Experience with AI Act mandates: Some providers have a long track record with GDPR, but AI Act representation is a newer, more technical requirement.
• Technical documentation handling: The representative must securely hold and produce your technical documentation to authorities on request.
• Support for authority and data subject requests: Fast, reliable forwarding of regulatory or user requests is essential.
• Clear exclusions: Understand what is not included—such as conformity assessment or technical testing—so you can arrange these separately if needed.

Below is a decision matrix to help you determine if you need an authorised representative and what type of provider fits your situation:

When comparing providers, check for published prices, what is included, and whether public verification or multi-language support is standard. Some providers, like REP27, offer a transparent, all-in-one price and detailed inclusions, while others may require you to request a quote or clarify details directly.

What the Price Really Includes: Detailed Comparison and Service Scope

The cost of appointing an EU AI Act authorised representative varies significantly depending on the provider and the features included. As of October 2026, verified published prices range from EUR 420 to EUR 1,490 per year. However, the true value lies in what is included in the service—and what is not.

• REP27 — Europe Services, SE: Offers a fixed price of EUR 1,490 per year (renewal EUR 1,190) covering the full written mandate under Articles 22 and 54, technical documentation holding for 10 years, multi-language transparency notices (up to eight languages), a verifiable certificate with QR code, a public verification page, a register of your AI systems, and a request desk for forwarding authority and data subject requests. There are no extra fees for EEA-wide coverage or multi-language support. Conformity assessment and technical testing are not included.
• Prighter: Lists a price of EUR 420 per year (Growth annual) for the authorised representative service. The public page does not specify if multi-language notices, public verification, or a register are included. Additional services or features may be available on request.
• Engage Compliance: Charges EUR 690 per year (Band 0, smallest band). The inclusion details are not fully specified on the public page; further information may be available upon request.
• DPO Europe: Offers the service at EUR 950 per year (first year). As with others, the public page does not detail inclusions such as notice languages, certificates, or registers.

None of the providers listed here include conformity assessment, technical testing, or model evaluation in their standard authorised representative service. These must be arranged separately if your AI system or model requires them for compliance.

Always check the provider’s official page for the most current and detailed information about what is included in the price.

Hidden Costs, Exclusions, and What Providers Usually Do Not Say

When appointing an EU AI Act authorised representative, it is essential to understand both what is included and what is excluded from the service. Here are some common exclusions and potential hidden costs, based strictly on published data:

• Conformity assessment, technical testing, and model evaluation: None of the providers in this comparison include these services. If your AI system is high-risk and requires conformity assessment, you must arrange this separately. REP27 explicitly states that it is not a notified body and does not sell conformity assessment or technical testing.
• Notice periods and per-request fees: REP27 does not mention any extra fees for forwarding requests or for multi-language support. Other providers do not specify on their public pages if there are additional charges for handling authority or data subject requests, or for providing certificates and registers. Always confirm these details before signing.
• Liability limits: No provider in this comparison specifies liability limits on their public pages. Review the contract terms carefully to understand the provider’s liability in case of non-compliance or errors.
• Termination and transition: The AI Act allows the representative to terminate the mandate if the provider acts contrary to the Act and requires notification to authorities. Ensure you understand the notice period and transition process to avoid gaps in compliance.

Some providers may appear less expensive upfront but charge extra for essential features like multi-language notices, public verification, or document holding. Always request a full breakdown of what is included and clarify any potential additional costs.

How Appointment Works: Step-by-Step Guidance for Buyers

The process of appointing an EU AI Act authorised representative is straightforward but requires careful attention to detail. Here is a step-by-step guide based on provider practices and the legal requirements:

1. Assess your obligations: Determine if your AI system or model is high-risk or general-purpose and if it is placed on the EU market. Use provider tools or checklists to confirm if you fall under Article 22 or 54.
2. Choose a provider: Compare published prices, inclusions, and support. Consider whether you need multi-language notices, public verification, or documentation holding.
3. Initiate onboarding: Most providers offer an online onboarding form where you provide details about your company, AI systems, and how they are offered in the EU.
4. Sign the mandate: The provider issues a written mandate for you to sign. This document formally appoints the representative and sets out their responsibilities.
5. Receive your certificate and documentation: Upon signing, you receive a certificate (often with a QR code for public verification), a register of your AI systems, and the required transparency notices in the agreed languages.
6. Publish transparency notices: Place the required notices on your website, app, or product as instructed. REP27, for example, provides guidance on placement and keeps a dated record of every version.
7. Maintain technical documentation: Ensure your technical documentation is complete and up to date. The representative holds this documentation and must produce it to authorities upon request.
8. Ongoing compliance: Monitor for regulatory updates, renew your mandate annually, and update your documentation and notices as needed. The representative will forward authority and data subject requests to you within the agreed timeframe.

Checklist for buyers:

1. Identify if your AI system/model is high-risk or general-purpose and reaches the EU market.
2. Check if you are established outside the EU.
3. Compare providers and select based on price, inclusions, and support.
4. Appoint the representative and sign the mandate.
5. Prepare and publish required transparency notices (in all needed languages).
6. Maintain technical documentation and ensure your provider holds it as required.
7. Monitor for regulatory updates and renewal deadlines.

Risks, Fines, and Enforcement: What Happens If You Get It Wrong

Non-compliance with the EU AI Act’s authorised representative requirement can have serious consequences. The law provides for administrative fines of up to €15 million or 3% of global turnover, whichever is higher, for breaches of key obligations (Article 99). These fines are in addition to any other penalties that may apply for related breaches, such as failure to provide required transparency notices or technical documentation.

In practice, enforcement risk is increasing as EU authorities, platforms, and business partners demand proof of compliance. For example, large platforms and marketplaces may require you to provide a certificate of appointment or a public verification page before allowing you to list or sell AI-powered products in the EU. Failure to comply can result in removal from platforms, lost contracts, and reputational damage—often before any regulatory fine is imposed.

The authorised representative also has obligations: if you act contrary to the AI Act, they must terminate the mandate and inform the relevant authorities. This can trigger an investigation and increase your risk of enforcement action.

To minimise risk:

• Appoint a reputable, transparent representative with a clear mandate and public verification
• Keep your technical documentation and transparency notices up to date
• Respond promptly to authority and data subject requests forwarded by your representative

Proactive compliance is not just about avoiding fines—it protects your business relationships and market access in the EU.

Realistic Scenarios: Which Obligation Applies and the Simplest Compliant Route

Understanding how the EU AI Act applies in real-world situations is essential for compliance. Here are three realistic scenarios, each illustrating a different obligation and the simplest route to compliance:

• Scenario 1: US SaaS with EU customers
  A US-based SaaS company offers a chatbot and AI-generated content to users in the EU. Because the AI interacts with EU users and the company is established outside the EU, it must appoint an authorised representative under Article 54 (general-purpose AI model) or Article 22 (high-risk system, if applicable). The company can select a provider like REP27, Prighter, Engage Compliance, or DPO Europe, complete onboarding, sign the mandate, and publish the required transparency notices. No representative is needed if the AI is used only internally.
• Scenario 2: Chinese Amazon seller using AI for product recommendations in the EU
  A Chinese seller uses an AI system to generate product recommendations visible to EU buyers on Amazon. Because the AI output reaches EU consumers, the seller must appoint an authorised representative. The process is similar: choose a provider, complete onboarding, sign the mandate, and publish required notices. If the AI is not visible to EU users, no representative is needed.
• Scenario 3: UK online shop using internal AI tools only
  A UK-based online retailer uses AI for internal stock management and logistics, with no AI output visible to EU users. In this case, the company is generally exempt from the authorised representative requirement under the AI Act, as the AI does not impact the EU market or users. No action is needed unless the company later deploys AI features that interact with EU users.

In each scenario, the key questions are: Is the company established outside the EU? Does the AI system or model reach EU users or the EU market? Is the AI high-risk or general-purpose? The answers determine whether an authorised representative is required.