AI Vendors & ML Platforms

You may not think you're regulated — but under the EU AI Act, DORA, and state laws, your customers' compliance is partly your obligation.

The pain

AI vendors are the new third-party risk. Your enterprise customers need you compliant before they'll sign — and regulators are coming for the supply chain.

EU AI Act DORA NIS2 Foundation Model Obligations

Laws that likely apply to you

  • EU AI Act — Foundation Model Obligations — technical documentation, copyright compliance for GPT/Claude/etc. deployers
  • DORA — ICT risk management for AI vendors serving EU financial entities
  • NIS2 — cybersecurity measures for AI service providers classified as essential entities
  • California SB 942 / AB 1200 — synthetic media and biometric obligations for anyone touching CA residents
  • NIST AI RMF — de facto standard even outside government; your customers will ask for it

What we do

We help AI vendors build the compliance infrastructure their enterprise customers require — documentation, risk assessments, and audit readiness. Many of our clients are ML platforms who didn't realize they were regulated until a customer asked.

Take the Assessment

Last verified: —

Informational only — not legal advice. Consult qualified counsel for binding guidance.