The EU Artificial Intelligence Act already applies to your company. Since 2 August 2026, most AI Act obligations are fully enforceable for companies that develop, integrate or use AI systems in the European market, with penalties in force. We help technology companies — SaaS products, platforms, agencies and businesses embedding AI into their products or processes — understand exactly what the regulation requires of them and comply without slowing the business down.
The problem: three different timelines and widespread confusion
After the Digital Omnibus reform (Regulation (EU) 2026/1744), the AI Act operates on several application dates at once: obligations already enforceable (prohibited practices, AI literacy, transparency, general-purpose AI models), high-risk obligations deferred to December 2027, and sectoral product obligations deferred to 2028. Most companies do not know with certainty which category each of their systems falls into or which date applies to them. That is precisely where our work begins.
Where to start: an AI system audit
Our entry service is an audit of your company’s AI use, with a clear deliverable. It includes:
AI system inventory: what the company develops, what it integrates from third parties (OpenAI, Anthropic, Google or other provider APIs) and what it uses internally.
Legal classification of each system under the AI Act: prohibited practice, high-risk, transparency obligation or general-purpose model, with the compliance date that applies to each.
Analysis of the company’s role for each system: provider, deployer, importer or distributor — obligations change depending on the role.
Gap report: which already-enforceable obligations are not being met and what enforcement risk that implies.
A compliance plan prioritised by deadline, with concrete actions and owners.
It is a defined piece of work with a fixed scope, timeline and deliverable, designed so that management has a complete picture of the company’s AI Act position within a few weeks.
Ongoing compliance services
Building on the system map, we support the company in implementing and maintaining compliance:
Transparency and product
Chatbot and assistant review: user disclosures compliant with Article 50.
Identification and marking of AI-generated content, including machine-readable marking.
Review of interfaces, terms of use and product documentation.
Contracts and vendors
AI clauses in vendor contracts: warranties, liability, AI Act and GDPR compliance.
Review of the API and model terms of third-party providers integrated into your product.
B2B SaaS contracts with AI components: DPA, SLA and limitation of liability.
Organisation and training
AI literacy programmes (Article 4) that can be evidenced before the authority.
Internal AI use policies and system governance.
Preparation for inspections and information requests from AESIA, the Spanish AI supervisory authority.
High-risk: getting ready for December 2027
For Annex III systems: risk management system, technical documentation, human oversight and conformity assessment, planned with sufficient lead time.
Selling AI-powered products into Spain and the EU?
We regularly advise foreign technology companies entering the Spanish and European market. We work natively in English and Spanish, and we cover the full legal picture your product faces in the EU: AI Act, GDPR, consumer rules and technology contracts, from a single team.
Why Ferrer-Bonsoms & Sanjurjo
Established practice in digital law, intellectual property and technology: AI Act compliance is never standalone — it sits alongside GDPR, consumer law and tech contracts.
Bilingual work in Spanish and English, for both Spanish companies and foreign companies selling AI products into the EU.
Practical approach: actionable deliverables and clear timelines, not generic memoranda.
How we work
An initial no-obligation call to understand your company’s AI use. A fixed proposal covering scope, timeline and fees. Delivery of the audit and compliance plan. And, if you wish, ongoing support with periodic reviews as the 2027 and 2028 deadlines approach.
Talk to us
If your company develops or integrates artificial intelligence and wants certainty about what the AI Act requires, write to despacho@fbsabogados.com or contact us. We will tell you clearly what applies to your case and how to resolve it.
Latest analyses of the AI Act:
-AI Act after the Digital Omnibus: What Obligations Apply to Your Company from 2 August 2026?