EU AI Act · Regulation (EU) 2024/1689

EU AI Act Evidence Readiness Pilot

A 60-day engagement that measures whether you can actually produce and present the evidence the EU AI Act requires for high-risk systems — and ends with a signed, independently verifiable Evidence Readiness Report.

Investment
$37,500
Duration
60 days
Deliverable
Signed Readiness Report

The obligation isn't “have a policy.” It's produce the evidence.

For high-risk AI systems, the EU AI Act expects tamper-evident records that exist at the moment of each decision — not a document assembled after an incident. Most teams have controls; few can prove them on demand. This pilot finds the gap before an examiner does.

Article 12 & 19

Record-keeping & logs

Automatic, traceable logs over the system lifetime — period of use, inputs, reference data, verifiers — retained for the required period.

Article 15

Accuracy, robustness & cybersecurity

Declared accuracy, resilience to faults, and resistance to manipulation of use or behaviour — each backed by evidence.

Annex IV

Technical documentation

A living description binding every control to the module that implements it and the version that produced each output.

Article 72

Post-market monitoring

Evidence collected and reviewed continuously across the system's lifetime, not just at launch.

What you get: a signed Evidence Readiness Report

The report is itself an EVE Proof artifact — the same canonicalize → hash → sign pattern behind our Governed Decision Certificates. Your audit team (or a notified body) verifies it offline against the published public key, with no shared secret and no trust in EVE.

  • A weighted readiness score and band (Ready / Substantially ready / Partial / Not ready), overall and per obligation area.
  • A gap-by-gap remediation plan — every obligation that isn't fully covered, prioritised, with the concrete step to close it.
  • Article-by-article evidence mapping to Art. 12, 15, 19, Annex IV, and Art. 72.
  • An ECDSA P-384 signature + hash chain — the report is tamper-evident and independently verifiable, and every assessment is recorded in a per-organisation, hash-chained ledger.

How the 60 days run

  1. Scope & assess (weeks 1–2). We stand up the readiness assessment against your in-scope high-risk system and score current evidence posture, obligation by obligation.
  2. Instrument & demonstrate (weeks 3–6). Route a representative decision path through EVE CoreGuard + EVE Proof so record-keeping and traceability are produced automatically and shown working.
  3. Sign & hand over (weeks 7–8). Issue the signed Evidence Readiness Report and remediation plan; walk your compliance and second-line teams through offline verification.
$37,500fixed · 60-day pilot
Single in-scope high-risk system. The pilot fee is credited toward a first annual EVE CoreGuard license.
Book the pilot →

This pilot assesses an organisation's readiness to produce and present the evidence Regulation (EU) 2024/1689 requires. It is not legal advice, not a conformity assessment, and not CE marking, and it does not guarantee compliance. Framework mappings describe technical control support and evidence capabilities. Consult qualified counsel and, where required, a notified body. Cryptographic signing is ECDSA P-384 in hosted production.