Appoint us
Buyer's guide

EU AI Act Authorised Representative for Non-EU AI Providers: Providers & Prices (2026)

Short answer: Non-EU AI providers must appoint an EU-based authorised representative under the EU AI Act (Regulation (EU) 2024/1689). Verified 2026 prices range from EUR 420 to EUR 1,490 per year. Services and inclusions vary: some offer only the legal address, others add multilingual notices, documentation holding, and public verification. Internal-only AI use is generally exempt from this requirement.

Updated · 9 sources checked

Providers compared

ProviderEstablished inPublished priceWhat the price includesBest for
REP27 — Europe Services, SECzech RepublicEUR 1,490/year (renewal EUR 1,190)Mandate under Art. 22/54, technical documentation holding, public badge, multilingual notices, 10-year record retention, request deskNon-EU AI model/system providers needing full transparency and documentation
PrightersourceGermanyEUR 420/yearOn requestOn request
Engage CompliancesourceUnited KingdomEUR 690/yearOn requestOn request
DPO EuropesourceNetherlandsEUR 950/year (first year)On requestOn request

Prices as published on each provider's website on 16 October 2026, excluding VAT unless stated. Each row links to its source.

What the EU AI Act Requires (with Article Numbers)

The EU AI Act (Regulation (EU) 2024/1689) is the world’s first comprehensive legal framework for artificial intelligence. It entered into force on 1 August 2024 and applies in stages through to 2030, regulating AI by risk rather than by technology (source, source). The Act covers any provider, deployer, importer, or distributor placing AI systems or general-purpose AI models (GPAI) on the EU market, regardless of where the company is based. Non-EU providers must appoint an authorised representative established in the EU (Art. 54 for GPAI models, Art. 22 for high-risk systems). This representative acts as the official contact for EU authorities, holds technical documentation, and ensures that transparency and marking requirements are met.

The Act distinguishes between providers (who develop or place AI systems/models on the market) and deployers (who use them). Providers outside the EU must have a representative before offering their AI in the EU. The law is risk-based: prohibited practices (Art. 5), high-risk systems (Annex III, Art. 22), transparency-risk systems (Art. 50), and minimal risk, with separate rules for GPAI (Art. 54). Transparency requirements (Art. 50) already apply from 2 August 2026, including clear notices for chatbots, AI-generated content, and deep fakes. High-risk system obligations start 2 December 2027. Fines for non-compliance can reach €15 million or 3% of global turnover for missing a representative, and up to €35 million or 7% for prohibited practices (Art. 99).

Internal-only AI use (no public or customer-facing AI, no output visible to EU individuals) is generally exempt from the representative requirement. The law follows the AI’s output and its impact in the EU, not the server location or company headquarters.

How to Choose an EU AI Act Authorised Representative

When selecting an EU AI Act authorised representative, it is essential to consider both compliance and practical support. The representative’s role is strictly defined by law: they must be established in the EU, accept a written mandate (Art. 22/54), hold technical documentation for 10 years, and act as the contact point for authorities. However, the scope of included services varies widely between providers.

Below is a comparison of included and excluded features for each provider (as published):

ProviderIncludedNot IncludedExtra Fees
REP27Mandate, documentation holding, multilingual notices, public badge, request deskLegal advice, DPO, compliance assessmentNone stated
PrighterOn requestOn requestOn request
Engage ComplianceOn requestOn requestOn request
DPO EuropeOn requestOn requestOn request

Always request a detailed service description and contract before appointment, as hidden costs or exclusions may apply.

What the Price Really Includes

Published prices for EU AI Act authorised representative services (as of October 2026) range from EUR 420 to EUR 1,490 per year. However, what you get for this fee varies:

Legal advice, DPO services, and compliance assessments are not included by default by any provider. If your business needs these, they must be sourced separately. Always check for renewal pricing, as some providers (e.g., REP27) offer a lower renewal rate after the first year.

Practical tip: Ask each provider for a sample mandate, a list of included deliverables, and their process for handling authority requests before signing.

Hidden Costs and Exclusions

While headline prices are published, many providers do not disclose details on extra fees, per-request charges, or liability limits. This can lead to unexpected costs or compliance gaps. Here’s what to look for:

Below is a summary of typical exclusions and potential extra fees (as published):

ProviderNotice PeriodPer-System FeesLiability Limit
REP27Not publishedSingle fee per systemMandate does not shield from enforcement
PrighterOn requestOn requestOn request
Engage ComplianceOn requestOn requestOn request
DPO EuropeOn requestOn requestOn request

Always request the full contract and clarify all terms before appointment.

How Appointment Works: Step by Step

Appointing an EU AI Act authorised representative is a process that requires careful preparation and documentation. Here is a practical, step-by-step guide based on the law and provider practices:

  1. Determine Applicability: Confirm if your company is a provider under the AI Act (i.e., you place AI systems or GPAI models on the EU market). Use the decision matrix below for guidance.
  2. Classify Your AI System: Identify if your system is high-risk (Annex III), a general-purpose model, or minimal risk. This affects which obligations and deadlines apply.
  3. Choose a Provider: Compare published prices, inclusions, and exclusions. Request a sample mandate and list of deliverables.
  4. Prepare Documentation: Gather your technical file, system description, intended use, and compliance records. REP27 requires this for mandate issuance.
  5. Sign the Mandate: The provider issues a written mandate under Art. 22/54. REP27 delivers this within 24 hours after receiving documentation.
  6. Receive Confirmation: Obtain a signed designation letter, public verification badge, and instructions for transparency notices. REP27 provides notices in up to 8 languages and a QR-coded badge.
  7. Publish Notices: Place required transparency notices on your website, chatbot, or AI-generated content as instructed. Keep all versions and records for 10 years.
  8. Ongoing Updates: Update the mandate and documentation if your AI system changes. Review compliance annually or on each significant change.

Checklist for today:

  1. Identify your AI system’s market presence in the EU
  2. Classify risk level
  3. Contact providers for detailed offers
  4. Prepare and submit documentation
  5. Sign and implement the mandate
  6. Publish and record all required notices
  7. Maintain records and review regularly

Risks and Fines for Non-Compliance

Failing to appoint an EU AI Act authorised representative exposes non-EU AI providers to significant risks. The law imposes fines up to €15 million or 3% of global annual turnover for missing the representative requirement (Art. 99). For prohibited practices, fines can reach €35 million or 7%. These penalties are among the highest in EU digital regulation, reflecting the seriousness of AI compliance.

Commercial risks are also substantial. Platforms, app stores, and large business customers routinely require proof of AI Act compliance, including the representative’s mandate and public verification. Without this, companies may lose contracts or be delisted before any regulatory fine is imposed.

Internal-only AI use (i.e., AI not exposed to EU individuals or the public) is generally exempt from the representative requirement. However, if your AI system or its output is accessible in the EU—even indirectly via partners or marketplaces—you must comply.

Practical tip: Keep all versions of transparency notices and mandate records. Authorities may ask for historical evidence of compliance, not just your current status. REP27 provides date-stamped records and a public badge for this purpose.

Remember: The representative does not shield your company from enforcement. You remain fully liable for compliance, and the representative’s role is to facilitate communication and record-keeping, not to answer on the merits or provide legal defence.

Decision Matrix: Do You Need an EU AI Act Representative?

If you are ...You need ...You do NOT need ...
Non-EU company, selling AI models/systems in EU (B2B/B2C)EU AI Act authorised representative (Art. 22/54)If only using AI internally, no public output
Non-EU marketplace seller (Amazon, Etsy, eBay)Representative if selling AI-enabled products/systemsIf only selling non-AI goods
EU-based companyNo representative needed—
Non-EU company, internal AI tools onlyUsually exemptRepresentative
Non-EU SaaS with AI chatbot for EU usersRepresentative requiredNot needed if chatbot is not available to EU users
Chinese AI hardware vendor with embedded AI featuresRepresentative required if sold in EUNot needed if not sold in EU

Always check your system’s exposure and role before deciding.

Scenarios: What Applies and How to Comply

These scenarios illustrate the importance of mapping your AI’s exposure and role. If in doubt, consult the law’s definitions (Art. 3) and seek written confirmation from your chosen provider.

What Providers Usually Do Not Say

Practical tip: Always request the full contract, a list of deliverables, and a sample mandate before appointment. Clarify all terms, especially for multi-system coverage and request handling.

When you do not need this

Companies using AI only for internal processes, with no interaction or output visible to EU individuals, generally do not need an EU AI Act authorised representative. EU-based companies do not need a representative. Sellers of non-AI goods on marketplaces are also exempt.

Frequently asked questions

Who must appoint an EU AI Act authorised representative?

Any non-EU company that places AI systems or general-purpose AI models on the EU market—whether direct to consumers or via partners—must appoint an EU-based authorised representative under Articles 22 and 54 of the EU AI Act. Internal-only use is usually exempt.

What does an EU AI Act authorised representative do?

The representative acts as the official EU contact for authorities, holds technical documentation for 10 years, forwards requests, and ensures transparency notices are in place. They do not provide legal advice or answer compliance questions on your behalf.

What is the penalty for not appointing a representative?

Fines can reach up to €15 million or 3% of global turnover for non-compliance with the representative requirement. Prohibited practices can trigger even higher fines—up to €35 million or 7%.

How quickly can I appoint a representative?

REP27 issues mandates within 24 hours after receiving documentation. Other providers’ timescales are not published—check directly with each provider for their process and lead time.

What is included in REP27’s service?

REP27 includes a written mandate, documentation holding for 10 years, multilingual transparency notices (up to 8 languages), a public verification badge, and a request desk. Legal advice, DPO services, and compliance assessments are not included.

Does the representative answer data subject or authority requests?

REP27 forwards requests to your company within 2 business days but does not answer on the merits. You remain responsible for substantive responses to authorities or data subjects.

Can I use the same representative for GDPR and the AI Act?

No. The GDPR (Article 27) and the AI Act require separate mandates, as they cover different obligations and roles. REP27 offers both, but each is a distinct contract and must be appointed separately.

Do I need a representative for AI used only internally?

No. If your AI system is not placed on the EU market and does not interact with EU individuals, you are generally exempt from the representative requirement. The law targets public or customer-facing AI and output accessible in the EU.

Are there extra fees for multiple AI systems?

REP27 lists a single fee per system; other providers do not publish details. Always confirm with your chosen provider if there are per-system or per-request charges, especially if you operate several AI products.

What documentation must I provide to the representative?

You must provide a technical file describing your AI system, its intended use, and compliance records. The representative holds these for 10 years and makes them available to authorities on request. REP27 manages this as part of its service.

How do I prove compliance to platforms or partners?

REP27 provides a public verification badge and certificate, which can be shown to platforms, app stores, or business partners as proof of compliance with the EU AI Act. Other providers may offer similar documentation—always request confirmation.

What happens if my AI system changes after appointment?

You must update your technical documentation and inform your representative of any significant changes to your AI system or its use in the EU. The representative will update records and, if needed, the mandate. Regular reviews are recommended.

Sources

  1. EU AI Act: First regulation on artificial intelligence — europarl.europa.eu
  2. EU AI Act compliance: Article 50 transparency and EU authorised representative | REP27 — gdprrepresentative.com
  3. Prighter – EU AI Act Authorised Representative — prighter.com
  4. Engage Compliance – AI Act Representative — engagecompliance.co
  5. DPO Europe – Authorised Representative under the EU AI Act — data-privacy-office.eu
  6. The EU AI Act: Ten key things to know — tlt.com
  7. Auditra: EU AI Act — auditra.eu
  8. EU AI Act regulatory framework — digital-strategy.ec.europa.eu
  9. EU AI Act official site — euaiact.com
REP27 — Europe Services, SESee exactly what REP27 includes →