EU AI Act Authorised Representative Cost: Providers & 2026 Prices
- Required for non-EU providers of high-risk and general-purpose AI (Articles 22 & 54)
- Verified 2026 prices range from EUR 420 to EUR 1,490/year
- REP27 offers fixed-fee plans: EUR 290–1,490/year
- Fines for non-compliance up to EUR 15 million or 3% of turnover
- Some providers charge extra for documentation or per-request handling
Providers compared
| Provider | Established in | Published price | What the price includes | Best for |
|---|---|---|---|---|
| REP27 — Europe Services, SE | Czech Republic | EUR 290–1,490/year (excl. VAT) | Designation letter, certificate, notices in 8 languages, request desk, register, 10-year doc holding (AI Act plan) | Non-EU AI providers seeking fixed-fee, multi-language support |
| Prightersource | Germany | EUR 420/year | Authorised representative for general-purpose AI (Growth plan) | Small to mid-size non-EU AI providers |
| DPO Europesource | Netherlands | EUR 950/year (first year) | Authorised representative under the EU AI Act | Non-EU providers needing Dutch representation |
| Engage Compliancesource | United Kingdom | EUR 690/year (Band 0) | Authorised representative for non-EU AI providers | Small non-EU AI providers |
| Trustora Digitalsource | EU | On request | Point of contact, documentation, market surveillance cooperation | Custom compliance solutions |
| Actus AIsource | EU | On request | Official representative, technical documentation, authority liaison | Providers needing full compliance support |
| DilicheckRepsource | EU | On request | Representation for high-risk and general-purpose AI | Providers with complex portfolios |
| VeraSafesource | EU | On request | Representation for general-purpose and high-risk AI | Providers seeking established compliance firms |
| representAI.eusource | EU | On request | Mandated point of contact for high-risk AI | High-risk AI system providers |
| EDPOsource | EU | On request | Official representation, authority communication, support | Providers seeking continuous support |
Prices as published on each provider's website on 16 October 2026, excluding VAT unless stated. Each row links to its source.
What the EU AI Act Requires (Articles 22 & 54)
The EU AI Act introduces a risk-based approach to regulating artificial intelligence systems, with specific obligations for providers established outside the European Union. Two key provisions—Article 22 and Article 54—require non-EU providers to appoint an authorised representative in the EU under certain conditions:
- Article 22: Non-EU providers of high-risk AI systems (such as those used in employment, credit scoring, education, biometrics, or critical infrastructure) must appoint an EU-based authorised representative before making their systems available on the EU market. This representative acts as the official point of contact for authorities and is responsible for holding technical documentation and facilitating regulatory oversight. (source)
- Article 54: Non-EU providers of general-purpose AI models (GPAI) must also appoint an EU-based authorised representative. This applies regardless of where the provider is established if the model is placed on the EU market or made accessible to EU users. (source)
These requirements are designed to ensure that EU authorities have a clear, accountable contact for compliance matters, technical documentation, and incident response—even when the provider is based outside the EU. The representative does not replace the provider’s liability but is a legal intermediary for regulatory purposes.
Failure to appoint an authorised representative when required is a standalone infringement, with possible fines up to EUR 15 million or 3% of global annual turnover, whichever is higher. (source)
Providers must also ensure that AI-generated content is clearly labelled and that users are informed when interacting with AI systems (Article 50). The law applies to both B2B and B2C scenarios if EU users are affected.
How to Choose an EU AI Act Authorised Representative
Choosing the right authorised representative is crucial for compliance and operational efficiency. Here’s what to consider:
- Published, fixed pricing: Transparent pricing helps avoid unexpected costs. REP27, Prighter, DPO Europe, and Engage Compliance all publish their prices, while others require direct inquiry.
- Scope of service: Confirm the provider covers both Article 22 (high-risk AI) and Article 54 (general-purpose AI). Some focus only on one area.
- Languages and documentation: Multi-language support and the ability to draft, store, and update notices are important, especially for global businesses. REP27 offers notices in 8 languages and a verifiable certificate.
- Experience with AI regulation: Not all GDPR representatives are equipped for the AI Act. Ensure the provider understands the specific requirements, such as technical documentation and transparency notices.
- Responsiveness and public verification: Features like a public badge or QR code for verification (as offered by REP27) can streamline due diligence with clients and platforms.
Decision matrix:
| If you are ... | You need ... | You do not need ... |
|---|---|---|
| Non-EU provider of high-risk AI | EU AI Act authorised representative (Art. 22) | None if not marketing to EU |
| Non-EU provider of general-purpose AI | EU AI Act authorised representative (Art. 54) | None if not accessible in EU |
| EU-based company using only internal AI | None | Authorised representative |
| Marketplace seller (Amazon, Etsy, eBay) | Representative if providing AI to EU users | None if only reselling, not providing AI |
| B2B SaaS with EU clients | Representative if AI is high-risk or general-purpose | None if not providing AI output to EU |
Always request a sample contract and clarify all included services before appointing.
What the Price Really Includes: Comparing Providers
The annual fee for an EU AI Act authorised representative can cover a wide range of services—or only the legal minimum. Here’s what to look for and how top providers compare:
| Provider | Included | Not included | Extra fees |
|---|---|---|---|
| REP27 | Designation letter, verifiable certificate, privacy notices (8 languages), request desk, AI system register, 10-year document holding | Legal advice, DPO services, compliance assessments | None stated |
| Prighter | Authorised representative for general-purpose AI | On request | On request |
| DPO Europe | Authorised representative | On request | On request |
| Engage Compliance | Authorised representative | On request | On request |
| Trustora Digital | Point of contact, documentation, market surveillance cooperation | On request | On request |
| Actus AI | Official representative, technical documentation, authority liaison | On request | On request |
| DilicheckRep | Representation for high-risk and general-purpose AI | On request | On request |
| VeraSafe | Representation for general-purpose and high-risk AI | On request | On request |
| representAI.eu | Mandated point of contact for high-risk AI | On request | On request |
| EDPO | Official representation, authority communication, support | On request | On request |
Some providers (including large law firms) may charge EUR 2,000–5,000/year for similar services (REP27 data). Always clarify if the price covers all required documentation, multi-system portfolios, and request handling—or if these incur extra fees. For example, REP27’s AI Act plan includes 10-year document holding and a request desk but does not provide legal advice or answer requests on the merits.
Checklist for buyers:
- Request a detailed service description
- Ask about per-request, document review, or multi-system fees
- Check if notices and certificates are included and in which languages
- Clarify the renewal and cancellation terms
Hidden Costs and Exclusions: What Providers Usually Do Not Say
While many providers advertise a single annual fee, there can be important exclusions and hidden costs. Based on available data:
- Legal advice and DPO services: Not included by REP27 and most others. The representative will forward requests but not answer on the merits or provide legal counsel.
- Compliance assessments: Not included by REP27. Some providers may offer these as separate consulting services.
- Per-request or document review fees: Not stated by REP27, Prighter, or DPO Europe, but some providers may charge for handling complex authority requests or reviewing new documentation.
- Notice periods and renewal: REP27 renews automatically unless cancelled before the renewal date. Always check the provider’s terms for notice periods and cancellation policies.
- Limits on liability: Providers generally do not shield you from direct enforcement. Article 27(5) (REP27) states that designation does not prevent actions against the company itself.
- Language and system limits: Some providers may charge extra for multiple languages or systems. REP27 includes up to 8 languages in its plans.
Always request the full service agreement and clarify all terms before signing. If your business has a complex AI portfolio or operates in multiple sectors, ask specifically about coverage for each system and any additional fees for scaling.
How Appointment Works: Step-by-Step Guidance
Appointing an EU AI Act authorised representative is a structured process. Here’s how to proceed:
- Assess your AI systems: Identify if your systems are high-risk (Annex III: employment, credit, education, biometrics, safety) or general-purpose AI models. Confirm if they are marketed or accessible in the EU.
- Shortlist providers: Choose providers with published prices, clear scope, and relevant experience. Consider language coverage and documentation support.
- Request sample contracts: Review the terms, included services, and any exclusions or extra fees. Clarify the renewal and cancellation process.
- Sign a written mandate: The law requires a written designation. REP27 issues this within 24 hours, including a verifiable certificate and public badge. Other providers’ timelines may vary.
- Update your documentation: The representative will hold technical documentation, notices, and compliance records (REP27: 10 years). Ensure your privacy notices and AI content labels are up to date and available in required languages.
- Ongoing compliance: Maintain communication with your representative, update documentation as your AI systems evolve, and respond promptly to authority or data subject requests forwarded by the representative.
Buyer’s checklist:
- Map all AI systems and their EU exposure
- Classify each system’s risk level
- Shortlist providers with published, fixed prices
- Request and review sample contracts
- Sign and file the mandate
- Update all required notices and labels
- Schedule annual reviews of documentation and notices
Risks, Fines, and Enforcement: What’s at Stake
The risks of failing to appoint an EU AI Act authorised representative are significant. The law provides for administrative fines up to EUR 15 million or 3% of worldwide annual turnover for non-compliance (whichever is higher). (source)
- Direct enforcement: The representative does not shield your company from direct enforcement actions. Article 27(5) (REP27) makes clear that authorities can pursue the provider directly.
- Commercial risk: Platforms, app stores, and large clients increasingly require proof of compliance. Lack of a valid representative or proper transparency notices can result in lost business before fines are even considered.
- Documentation and audit: The representative must hold technical documentation and be able to produce it on request. Incomplete or outdated records can trigger investigations or additional penalties.
- Transparency obligations: The AI Act requires clear labelling of AI-generated content and user notification when interacting with AI. Failure to comply can lead to both regulatory and reputational damage.
Providers rarely advertise their liability limits or the fact that legal advice is not included. Always clarify these points in advance.
Realistic Scenarios: Who Needs an EU AI Act Representative?
- US SaaS with EU clients: A US-based SaaS company offering a chatbot or AI-generated content to EU users must appoint an authorised representative under Article 54 (general-purpose AI) and Article 50 (transparency). The simplest route is a fixed-fee plan from REP27 or Prighter, which includes designation, notices, and documentation holding.
- Chinese Amazon seller: If selling an AI-powered product (e.g., facial recognition camera) to EU customers, the seller is a provider of a high-risk AI system under Article 22. Appointment of an EU representative is mandatory before the product can be marketed in the EU. REP27’s AI Act plan covers this, as do other specialist providers.
- UK online shop: If the shop uses only internal AI tools (e.g., for inventory management) and does not provide AI output to EU users, no representative is needed. If the shop offers AI-powered features (e.g., recommendation engines or chatbots) to EU customers, it must appoint a representative under the relevant articles.
These scenarios illustrate that the obligation depends on both the nature of the AI system and its exposure to EU users. Always map your systems and review the legal definitions before proceeding.
When you do not need this
- EU-based companies using only internal AI tools (no public/user contact)
- Non-EU companies not marketing or making AI available in the EU
- Resellers or marketplaces not providing AI systems themselves
Frequently asked questions
Who must appoint an EU AI Act authorised representative?
Any non-EU provider of a high-risk AI system (Article 22) or general-purpose AI model (Article 54) that is made available or put into service in the EU must appoint an authorised representative in the Union. This applies regardless of the provider’s location if EU users can access the system.
What is included in the REP27 AI Act representative service?
REP27 provides a signed designation letter, verifiable certificate, privacy notices in up to 8 languages, a request desk, a register of AI systems, and 10-year document holding. Legal advice, DPO services, and compliance assessments are not included. Requests are forwarded but not answered on the merits.
How much does an EU AI Act authorised representative cost?
Published prices as of October 2026 range from EUR 420/year (Prighter) to EUR 1,490/year (REP27 AI Act plan). Some providers charge on request or have higher fees for larger portfolios. Always confirm what is included in the annual fee.
Are there extra fees beyond the annual price?
Some providers may charge per-request handling, document review, or for additional systems/languages. REP27 does not state extra fees for its AI Act plans. Always check the contract and request a full fee schedule before signing.
What happens if I do not appoint a representative?
Non-compliance can result in fines up to EUR 15 million or 3% of worldwide turnover, whichever is higher. In addition, platforms and clients may require proof of compliance as a condition of doing business, so lack of a representative can lead to lost contracts.
Does the representative answer legal requests for me?
REP27 and most providers forward requests from authorities or data subjects but do not answer on the merits or provide legal advice. The company itself remains liable for compliance and must respond to substantive legal or technical questions.
Can I use my GDPR Article 27 representative for AI Act compliance?
No. The AI Act and GDPR are separate laws with different requirements and mandates. You must appoint a specific AI Act representative if required by Article 22 or 54. Some providers offer both services, but they are separate appointments.
How quickly can I appoint a representative?
REP27 issues the designation within 24 hours. Other providers’ timelines may vary; always confirm before signing if you have urgent deadlines or need to demonstrate compliance to a platform or authority quickly.
Is the service suitable for marketplace sellers (Amazon, Etsy, eBay)?
If you are a non-EU seller providing AI-powered products or services to EU users, you must appoint a representative. If you are only reselling non-AI goods or do not provide AI features, you do not need one.
What documentation does the representative hold?
The representative holds technical documentation, notices, and records of compliance for at least 10 years (REP27). This is required for regulatory inspections and must be updated as your systems or notices change.
Can I change or cancel my representative?
Yes, but check the provider’s notice period and process for termination. REP27 renews automatically unless cancelled before the renewal date. Ensure continuity to avoid compliance gaps and always keep your documentation up to date.
What if I have multiple AI systems or models?
Some providers, such as REP27, offer plans that cover multiple systems and maintain a register. Others may charge extra for each system or model. Always clarify coverage and pricing if your company has a diverse AI portfolio.
Sources
- AI Act compliance: Article 50 transparency and EU authorised representative | REP27 — gdprrepresentative.com
- Prighter – EU AI Act Authorised Representative — prighter.com
- DPO Europe – Authorised Representative under the EU AI Act — data-privacy-office.eu
- Engage Compliance – AI Act Representative — engagecompliance.co
- Trustora Digital – EU AI Act Authorised Representative — trustoradigital.eu
- Actus AI – EU AI Act Authorised Representative — actusai.eu
- DilicheckRep – EU AI Act Authorised Representative — dilicheckrep.com
- VeraSafe – EU AI Act Representative Program — verasafe.com
- representAI.eu – EU Authorised Representative AI Act — representai.eu
- EDPO – AI Act Representative — edpo.com
- EU AI Act – Article 54 — ai-act-service-desk.ec.europa.eu
- Three things you need to know about the new EU AI Act rules — itpro.com
- arXiv:2501.04014 – EU AI Act database requirements — arxiv.org
- arXiv:2410.14501 – AI Act bias and data — arxiv.org
- arXiv:2510.13591 – EU AI Act risk-based framework — arxiv.org
- TechRadar – The EU AI Act: what it means and how to comply — techradar.com