Step 1: Discover
We lead the discovery process, surfacing both the AI systems known to IT and those operating beneath the radar. You receive a documented AI inventory that forms the basis for everything that follows.
EU AI Act Readiness
The EU AI Act (Regulation (EU) 2024/1689) applies to any organisation operating within the EU that develops, deploys, imports, or distributes AI systems. It introduces obligations that vary depending on the risk classification of the systems involved, with key provisions already in force.
Many organisations do not yet have a clear picture of what AI is operating across their business, let alone whether any of it falls within the Act’s scope. That uncertainty itself is the reason to act. Datapac works with organisations to establish that picture, classify their AI systems against the Act’s requirements, and put in place the governance and controls their obligations demand.
EU AI Act Readines
We identify the AI systems operating across your organisation, classify each against the Act's risk tiers, and give you a clear, defensible picture of where your obligations lie and what needs to change to meet them.
Benefits of Our EU AI Act Readiness Service
Step 2: Classify
We apply the Act’s risk classification logic to every system in your inventory, identifying prohibited and high-risk systems and mapping the specific obligations that flow from each classification.
Step 3: Govern
We advise on governance design and provide the policy templates needed to establish the roles, oversight structures, and decision rights the Act requires from deployers and providers of AI systems.
Step 4: Control
We guide your teams through implementing the operational controls the Act demands, including conformity assessments, transparency notices, human oversight mechanisms, and activity logging. Your teams own the implementation.
Step 5: Train
The Act requires deployers to ensure appropriate AI literacy across their workforce. We deliver role-based training or shape your internal programme, with records that demonstrate the Act’s literacy requirement has been met.
Step 6: Monitor
We help establish the cadence and systems for ongoing monitoring of AI performance, serious incident reporting obligations, and regulatory developments, and remain available for periodic review as requirements evolve.
Step 1: Discover
We lead the discovery process, surfacing both the AI systems known to IT and those operating beneath the radar. You receive a documented AI inventory that forms the basis for everything that follows.
Step 2: Classify
We apply the Act’s risk classification logic to every system in your inventory, identifying prohibited and high-risk systems and mapping the specific obligations that flow from each classification.
Step 3: Govern
We advise on governance design and provide the policy templates needed to establish the roles, oversight structures, and decision rights the Act requires from deployers and providers of AI systems.
Step 4: Control
We guide your teams through implementing the operational controls the Act demands, including conformity assessments, transparency notices, human oversight mechanisms, and activity logging. Your teams own the implementation.
Step 5: Train
The Act requires deployers to ensure appropriate AI literacy across their workforce. We deliver role-based training or shape your internal programme, with records that demonstrate the Act’s literacy requirement has been met.
Step 6: Monitor
We help establish the cadence and systems for ongoing monitoring of AI performance, serious incident reporting obligations, and regulatory developments, and remain available for periodic review as requirements evolve.
Benefits of Our Service
We identify the AI systems operating across your organisation, classify each against the Act's risk tiers, and give you a clear, defensible picture of where your obligations lie and what needs to change to meet them.
Understand the AI in your organisation
Our discovery and classification process gives your organisation a complete, accurate picture of its AI footprint and a clear understanding of exactly where its obligations under the Act lie. That clarity is the starting point for everything else.
Turn AI governance into a commercial advantage
The expectation that suppliers can demonstrate responsible AI governance is growing rapidly across both public and private sector procurement. Organisations that can evidence a structured approach to AI governance, grounded in the Act’s requirements, are better positioned to win and retain business in environments where this is increasingly a baseline requirement.
Internal capability, not external dependency
Meeting obligations under the EU AI Act is not a one-time exercise. The regulatory landscape will continue to evolve, and so will the AI systems operating in your business. Our programme is designed to leave your organisation with the governance systems, internal knowledge, and processes to manage its obligations independently over the long term, not to create a dependency on ongoing external support.
We build it, we hand it over, and it works without us.
Questions about our EU AI Act Readiness Service?
The EU AI Act applies to any organisation that develops, deploys, imports, or distributes AI systems in the EU, regardless of where the organisation is based. If your organisation uses AI-enabled software, operates AI features within its products or services, or purchases AI systems from third-party vendors, it is likely within scope in some capacity. An applicability and classification assessment is the most reliable way to establish your specific exposure.
Organisations that deploy AI systems developed by third parties are classified as deployers under the Act and carry their own obligations, separate from those of the provider. These include ensuring appropriate human oversight, maintaining logs of high-risk system operation, and conducting data governance assessments where required. Using AI tools developed elsewhere does not remove regulatory responsibility.
Prohibitions on unacceptable-risk AI applications have applied since February 2025. Obligations for providers and deployers of high-risk AI systems apply from August 2026. Given that achieving readiness for high-risk AI obligations requires meaningful preparation time, organisations that have not yet begun their assessment are already operating with limited runway.
High-risk AI systems are those used in areas where the consequences of failure or misuse could significantly affect health, safety, or fundamental rights. This includes AI used in critical infrastructure, education and vocational training, employment and HR processes, essential services such as credit assessment and healthcare, law enforcement, and biometric identification. Many organisations in the public and private sector are already operating AI systems that meet this classification.
EU AI Act compliance is not a fixed state and ultimately sits with the organisation, and is not something we can certify for. Our role is to provide clarity on obligations, identify gaps, and support the implementation of proportionate controls. The framework-based approach we use means that the governance structures put in place are built to evolve alongside the regulatory landscape, rather than being narrowly calibrated to a single set of requirements.
What Our Clients Say
-
“Evolving Infrastructure...”We had worked with Datapac in the past, and knew that its skilled team was best placed to deliver on our key objectives as technologies continue to advance. Reliable access to Datapac’s experts is invaluable and gives us the peace of mind to focus on delivering value-adding projects for the centre.
-
“Night and Day Difference...”Server infrastructure is such a vital part of our IT environment that we needed to go with a partner who would take the time to fully assess our requirements and schedule implementation in a way that supports our operations. Having worked with Datapac on a number of significant projects in the past, they were the obvious choice. The new infrastructure is a night-and-day difference; server downtime is a thing of the past for us
-
“We Knew We Could Trust Them...”Having enlisted Datapac’s services in the past, we knew we could trust them to deliver on this next phase of our journey with an overhaul of our IT support processes. The enhanced service gives us the peace of mind and confidence to support and launch innovative new resources for families across Cork.
-
“Strategic Partnership...”As our software solution has grown, so too has the amount of data that needs to be stored and secured. Datapac has been a long-time trusted advisor to Kefron, and the team worked closely with us to provide strategic road mapping and deliver this infrastructure upgrade with little to no downtime or interruptions to our business. We can continue to grow Kefron AP at pace with full peace of mind
-
“Supported In Every Aspect...”Every aspect of the work we do is supported by the Datapac team. Datapac’s proactive support gives us the confidence to innovate and expand, and this evolution of our strategy will ensure that we can provide an enhanced service for our valued patrons. As an important economic generator for the region, we greatly appreciate Datapac’s commitment to our sustainable future. We look forward to continuing to work with the team over the next number of years.
