Aztec AI Compliance | Governance you can evidence
Key duties are already live
EU AI Act field guide for UK business

Scope Check and Compliance Pack

If your business uses AI, such as chatbots, content generation, or AI-assisted analysis, the EU AI Act may already apply to you. Aztec gives you the ready-made compliance pack to put proper AI governance in place: clear rules, staff training, transparency notices, and audit-ready evidence.

Plain English guidance and a useful first answer in minutes.

Your evidence file
01
ScopeKnow where you stand
02
ControlsSet rules and ownership
03
EvidenceKeep the record ready
Plain-English templatesGovernance built for evidence12 months of updates included
01Filed
Implementation timeline

Know your dates. Act with context.

The EU AI Act rolls out in stages. The most useful first step is to understand which duties are live today and what needs planning next.

1

Prohibited practices are banned. AI literacy begins.

Live

The Act prohibits red-line uses including social scoring and certain manipulative, biometric, and emotion-recognition practices. Providers and deployers must also support appropriate staff AI literacy.

2

Transparency duties apply.

Live

People must be told when they are interacting with an AI chatbot. AI-generated or manipulated content, including deepfakes, must be identified where the rules require it.

3

Additional prohibitions and marking requirements take effect.

Next

The next implementation stage introduces a further prohibited category and ends a transition period for machine-readable marking of some generative AI content.

4

Annex III high-risk obligations apply.

Later

Recruitment, credit and insurance, biometric identification, education, and essential-services systems enter the fuller high-risk regime, including oversight, logging, and monitoring.

5

Annex I high-risk obligations apply.

Later

The high-risk regime extends to AI that forms part of selected regulated products, including relevant machinery and medical-device applications.

General information based on the EU AI Act. Dates and obligations can be affected by your system and circumstances, so confirm your specific position with an appropriate specialist.

02Filed
Compliance exposure

Non-compliance has a material cost.

Article 99 sets different maximum penalties for different types of breach. The risk is not only the headline fine. It is also the lack of a clear record when a client, auditor, or regulator asks how you govern AI.

Prohibited practices
€35m or 7%

For breaches of the Act's prohibited-practices list, including selected manipulative, social-scoring, and unlawful biometric uses.

Other obligations
€15m or 3%

For many other provider and deployer breaches, including transparency duties and applicable high-risk requirements.

Information failures
€7.5m or 1%

For supplying incomplete, incorrect, or misleading information to a regulator or notified body.

A proportionate starting point matters. For SMEs and start-ups, the Act includes a more favourable calculation in relevant cases. Good governance still matters because clear records can make your position easier to explain.

03Filed
Who this is for

If you use AI, you need a clear view of the risk.

The Act reaches further than the organisations that build AI. If your business uses AI tools and the use has an EU connection, you may be a deployer with obligations of your own.

  • Know your tools. Maintain a simple register of each AI system and its purpose.
  • Train your people. Give staff enough knowledge to use tools appropriately.
  • Be transparent. Tell people when they are interacting with AI or viewing AI-made content where required.
  • Keep evidence. Preserve the practical record clients, auditors, and regulators may ask to see.
Ready to complete
04Filed
What you get

A complete working file, not a theoretical checklist.

Each pack is written in plain English and arranged in the order you need it. A Start Here Guide and Scope Check help turn policy intent into an evidence trail.

  • 01

    AI Usage Policy: the internal rulebook for permitted AI use.

  • 02

    AI Register: a living inventory of tools, purpose, ownership, and risk.

  • 03

    AI Risk Triage Record: an evidence-led classification for each use case.

  • 04

    AI Literacy Briefing and Training Record: practical material plus proof of completion.

  • 05

    AI Transparency Notices: ready-to-publish disclosure language for Tier 2.

  • 06

    AI Supplier Checklist: targeted due diligence for new AI tools.

  • 07

    Review Log and Completion Checklist: proof that controls are current and complete.

  • 08

    EU AI Act Compliance Statement: a concise position statement for clients and auditors.

12 months of updates included as significant guidance develops.

05Filed
A practical path

Three steps. One organised evidence file.

01

Check your scope

Take the free check to understand whether the Act reaches your business and where to begin.

02

Choose your pack

Use your result to select the appropriate template pack, with no unnecessary complexity.

03

Put it in place

Work through the guides and preserve the completed documents as your governance record.

06Filed
Compliance packs

Choose the foundation that fits your use of AI.

The free Scope Check is designed to help you choose honestly. If your situation needs specialist advice, you should know that before you buy a template pack.

Start hereFind your tier in minutes, at no cost.
Start the Scope Check
Assurance dossier
Tier 111 documents

Essentials

For low-risk businesses using established AI tools.

£149 incl. VAT

  • Core policy, register, triage, and training materials
  • Audit-ready compliance statement
  • 12 months of relevant updates included
Buy Tier 1
Assurance dossier
Tier 3Expanded pack

High-Risk

For deployers with high-risk Annex III use cases.

£599 incl. VAT

  • Everything in Transparency, plus high-risk records
  • DPIA and Bias and Fairness Record
  • High-Risk Compliance Statement
Buy Tier 3
Assurance dossier
Tier 4Expanded pack

Provider

For organisations that build or sell AI products.

£999 incl. VAT

  • Everything in High-Risk, enhanced for providers
  • Declaration of Conformity and incident template
  • Provider cheat sheet for a structured starting point
Buy Tier 4

Before purchase: Aztec packs are general template resources, not legal advice. Read the legal information below and seek independent advice where your use is complex, high-risk, or sector-specific.

BC
Built byBridget ConveyChange and regulatory transformation specialist
07Filed
Why Aztec

A disciplined, business-first interpretation of compliance.

Aztec AI Compliance is built by Bridget Convey, a change and regulatory transformation specialist with more than 25 years across UK financial services. The work is informed by senior experience across banking, asset management, insurance, operations, compliance, and risk.

The approach is deliberately practical: read what the law requires, translate it into plain English, and build the evidence trail before a regulator, client, or auditor asks for it. That discipline informs every document in the packs.

Read the White Papers
Questions

Useful answers before you commit.

Not every AI use case has a simple answer. These are the questions we hear most often from businesses looking for a practical first step.

Ask a question by email

Scope and responsibilities

Does the EU AI Act apply to a UK business?+

It can. If your business uses, develops, or deploys AI and has an EU connection, for example through EU customers, staff, operations, or output used in the EU, the Act may affect you. The free Scope Check is designed to give you a practical first view.

We only use tools such as ChatGPT or Microsoft Copilot. Do we need records?+

Possibly. The key question is how each tool is used, who it affects, and whether the output influences customer, employee, or third-party decisions. A clear tool register, basic triage, training, and evidence of governance help demonstrate responsible use.

What if our AI use affects credit, recruitment, or underwriting?+

The Scope Check flags likely high-risk patterns early. High-risk and provider cases often benefit from specialist legal advice alongside template resources, particularly where the system has a material effect on people.

Packs and support

Which tier should we choose?+

Start with the free Scope Check before you buy. It is designed to route ordinary business use to the most suitable tier and to identify situations where a more specialist discussion is sensible.

Can we upgrade after buying a lower tier?+

Yes. Existing customers can upgrade and pay the difference between tiers. Send your original order confirmation to [email protected] and we will provide the relevant upgrade code.

What do we receive after purchase?+

You receive an instant digital download with the documents included in your tier and a Start Here Guide. The documents are supplied as editable Word files so they can be completed for your organisation.

Legal context and refunds

Is this legal advice or a certification?+

No. Aztec provides practical template resources and general information, not legal advice, certification, or a guarantee of compliance. You should seek independent legal advice for matters specific to your organisation, sector, and jurisdiction.

Are updates included?+

Yes. Each pack includes 12 months of updates for relevant regulatory developments. The templates are designed as a practical evidence-led foundation as guidance develops.

Is there a refund policy?+

Every pack includes a 14-day money-back guarantee. If the pack is not right for you, email [email protected] within 14 days of purchase to request a refund. This is separate from your statutory rights.

A defensible place to begin

Know your obligations. Keep the evidence.

Start the free Scope Check