EU AI Act enforcement begins August 2, 2026. Any AI-powered app showing a chatbot or AI-generated content to EU users must display a disclosure — or face fines up to €15M or 3% of global turnover. Check if you comply. 3 minutes. $799.

COMPLIANCE WING

EU AI Act Article 4 — Enforcement: August 2, 2026

Is your AI app legally allowed to operate in the EU?

They audit your tools. We audit your product.

We audit your AI product for GDPR, EU AI Act, SOC 2, and ISO 27001 — not your internal tools. This is compliance for what you ship. 60 checks, results in 3 minutes, no code access required. Fines up to €35M.

No legal firm needed to get started. Credit card required. $799 one-time. 7-day money-back guarantee.

Prices shown in USD. Indian customers: GST applicable at checkout as required by law.

TRUSTED BY 40+ COMPANIES | Fractional CTO review on every DFY engagement | View sample report →
€35M
max fine for EU AI Act violations
60
automated compliance checks
3 min
delivery time
PRICING CONTEXT
$7,500/yr
Sprinto / Vanta entry
→
$799 once
LRC Compliance Score
Same frameworks. Same findings. 90% lower cost. No annual contract. No sales call. Facing a Sprinto renewal increase? Read this before you renew.

WHAT HONEST LOOKS LIKE

We tell you what we can reliably check.
And exactly where our scope ends.

Scope of this assessment

This report covers 60 automated technical checks, AI analysis of your privacy policy, and a 5-question self-assessment. It tells you what technical compliance measures are in place and what is missing. It does not constitute legal advice or legal certification. Launch Ready Code is not a law firm.

Think of this as a home inspection report. We tell you exactly what is there and what is missing. Implementing our recommendations puts you in a strong technical compliance posture — we document every step. This is not legal advice and does not constitute legal certification. For CTO-implemented fixes and a Technical Implementation Certificate, see DFY Compliance Setup.

60 AUTOMATED CHECKS

Four frameworks. One scan.

We run a structured check across GDPR technical requirements, EU AI Act Article 50 disclosure obligations, SOC 2 technical foundations, and ISO 27001 Annex A controls — against your live URL and public policy documents, with no code access required. For a plain-English walkthrough of GDPR requirements specific to vibe-coded apps, see our GDPR guide for vibe-coded apps.

GDPR Technical
CONSENT · DATA RIGHTS · POLICY
  • Cookie consent loading before tracking scripts
  • Analytics without Consent Mode
  • Tracking pixels without consent
  • Session recording tools without consent
  • Privacy policy completeness
  • Data rights mechanisms (delete, export)
  • CCPA opt-out signal detection
EU AI Act Article 50
DISCLOSURE · LABELING · BIOMETRICS
  • AI system detected in your app
  • Chat interface without AI disclosure
  • AI-generated content without labeling
  • Terms of Service reference to AI usage
  • Biometric processing signals
SOC 2 Foundations
TRANSPORT · HEADERS · THIRD-PARTY
  • HTTPS everywhere
  • Security headers (HSTS, CSP, X-Frame-Options)
  • Third-party SaaS identified
  • Error pages without stack traces
  • SSL certificate validity
ISO 27001 Foundations
ACCESS · CRYPTOGRAPHY · POLICY
  • Security policy published
  • Access control and RBAC signals
  • Encryption in transit and at rest
  • Patch and update management
  • Incident management procedure
  • Vendor security documentation
  • Business continuity indicators
  • Asset classification signals
60
Automated checks run against your live URL and public documents.

No code access. No GitHub credentials. No install. Paste your URL and we do the rest — plus an AI-powered review of the text in your privacy policy to flag missing disclosures, data retention statements, and controller identification.

WHAT YOU GET

Seven deliverables. One $799 payment.

Everything you need to understand your compliance posture and fix it yourself — or use as the diagnostic before asking us to implement it for you.

01
Compliance Score /100 with visual gauge
A scored breakdown across all four frameworks: GDPR, EU AI Act, SOC 2 foundations, and ISO 27001 foundations. Each dimension scored separately so you know exactly where to focus first.
02
Finding cards with fix instructions
Every non-compliant item gets a card: what we found, why it matters legally, how to fix it, and an estimated fix time. No jargon. Written for founders, not lawyers.
03
Fix Roadmap
Every finding prioritised by regulatory risk. Estimated implementation time per item. Designed so you can hand it directly to a developer and they know exactly what to build.
04
Template Document Pack
Ready-to-use templates: Data Processing Agreement (DPA), Record of Processing Activities (ROPA), breach notification procedure, and cookie policy template. Customise and publish.
05
Compliance Report PDF
Branded, dated, and shareable. Suitable for showing investors, enterprise prospects, or potential acquirers that you take compliance seriously. See a sample report →
06
Self-assessment questionnaire (5 questions)
A short set of questions that covers what automated scanning cannot determine: your data flows, your legal basis for processing, and your AI training data sources. Completed by you, reviewed by our system.
07
$799 credited toward DFY Compliance Setup
If you want us to implement everything — implement the fixes, set up the consent management, and issue a Technical Implementation Certificate — your $799 is credited toward the $2,999 DFY Compliance Setup. You only pay $2,200 more to upgrade.
$799 credit applied automatically

FREE TOOLS

Two tools you can use right now. Free.

Built because EU AI Act compliance has too much jargon and too few starting points. These tools give your team a running start.

EU AI ACT ARTICLE 11

Annex IV Documentation Generator

Generate the technical documentation required for high-risk AI systems under Article 11. Enterprise procurement teams are asking for this. Takes 15 minutes.

Generate your Annex IV documentation →
EU AI ACT ARTICLE 4 — DEADLINE: AUG 2, 2026

Article 4 Literacy Training

Free 4-module training for your team. Satisfies Article 4 literacy requirements. Signed staff acknowledgements and printable certificates included.

Free Article 4 literacy training for your team →

SCOPE CHECK

Find out if you're in scope — 3 minutes.

Answer 6 questions. We'll show you your EU AI Act exposure level and exactly what it means for your product.

Q1 / 6

Does your product use AI to make decisions about individual people?

HOW WE COMPARE

$799. Three minutes. Everything you need to start.

They audit your tools. We audit your product. — Legal firms, compliance platforms, and AI Act tools compared against what we actually deliver.

LRC Compliance Score
$799 one-time		 AIComply
$49/mo ($588/yr min)		 Legal firm
$5,000–$30,000		 Vanta
$10,000+/yr		 DIY
40+ hrs
Entry price $799 once $49/mo ($588/yr min) $5,000–$30,000 $10,000+/yr 40+ hrs of your time
Target buyer Founders shipping AI products Internal AI tool operators Any organisation Enterprise compliance teams Anyone with time
Audits your product ✓ ✗ ✓ ✗ Varies
Security scanning ✓ ✗ ✗ ✗ ✗
Human CTO review ✓ ✗ ✓ ✗ ✗
Annex IV documentation ✓ $399/mo tier only Sometimes ✗ ✗
GDPR + SOC 2 + ISO 27001 ✓ ✗ ✓ ✓ Unknown
AI literacy training ✓ $149/mo tier only ✗ ✗ ✗
No code access required ✓ ✓ Varies ✗ Varies

Comparing a specific tool? See how we stack up against Drata, Vanta, Comp.ai, Sprinto, and Thoropass.

Want us to implement it for you?

DFY Compliance Setup

Our Fractional CTO implements every fix: consent management platform setup, ROPA creation, AI disclosure implementation, security header configuration, and policy document finalisation. Every change delivered as a PR you approve. We issue a Technical Implementation Certificate on completion confirming every item was addressed. DPA facilitation is available in Compliance Enterprise (coming soon). Your $799 Compliance Score is credited in full — you pay just $2,200 more to upgrade.

DFY Compliance Setup
$2,999
($799 credit applied = $2,200 net)
After Month 1, auto-continues at $399/mo (Compliance Monitoring) unless you cancel before Month 2.

COMPLIANCE PRICING

Four tiers. One clear path.

From a 60-second free check to a solicitor-reviewed certificate — every stage has a clear job to do.

Diagnostic
Compliance Score
$799
one-time · delivered in under 3 minutes
$799 credited toward DFY Setup in full
Who this is forFounders who want to know exactly where their compliance gaps are before taking action — or before an enterprise prospect asks. The definitive diagnostic: every gap mapped, prioritised, and ready to fix.
What you get
  • 60 automated checks across GDPR, EU AI Act, SOC 2 foundations and ISO 27001
  • AI policy gap analysis — your actual privacy policy reviewed against current requirements
  • Template policy documents — ready to publish with your details filled in
  • Prioritised fix roadmap PDF — every gap ranked by severity with estimated fix time
  • Compliance Report PDF — branded, dated, shareable with investors or enterprise prospects
  • No code access required · results in under 3 minutes

Technical assessment, not legal advice. We tell you what is missing and how to fix it. A lawyer determines whether you meet applicable legal standards.

Get Compliance Score — $799

3 minutes · 7-day money-back guarantee · No code access required

Most Popular
DFY Compliance Setup
$2,999
one-time · then $399/mo from Month 2
$799 Compliance Score included — you pay $2,200 net to upgrade
Who this is forFounders who want every compliance gap fixed for them — code changes, policy documents, and a CTO-signed Technical Implementation Certificate — without doing the work themselves.
DFY exclusive
Technical Implementation Certificate issued on completion.
Every fix implemented as a PR you approve before anything ships. Certificate confirms every item was addressed — shareable with investors, enterprise prospects, or legal counsel.
What's included
  • Compliance Score included — full 60-check diagnostic ($799 value)
  • Fractional CTO implements every fix: consent management, AI disclosure, GDPR data rights, security headers
  • The internal controls an automated scan can't see — a senior engineer reviews and implements encryption at rest, MFA / RBAC enforcement, audit logging, working data-rights workflows (DSAR / delete / export), and backup & recovery. These live inside your infrastructure, so no external scanner can verify them — the human package is where they actually get done.
  • Policy documents drafted and finalised — privacy policy, ROPA, DPA templates
  • Every code change opened as a PR — you review and approve before anything ships
  • Technical Implementation Certificate confirming every item was addressed
  • 45-min founder handoff call — walk through every change, ask anything
  • Auto-continues: Compliance Monitoring at $399/mo from Month 2
Start DFY Setup →

10-day implementation · CTO-signed Technical Implementation Certificate · PRs you approve

Ongoing
Compliance Monitoring
$399
/month
Typically entered after DFY Setup
Who this is forFounders who have their compliance in order and need to stay that way. Regulations evolve and your product ships new features — this keeps your posture current without re-doing the work from scratch.
What you get each month
  • Monthly automated re-scan — all 60 checks, every month
  • Regulatory change alerts — notified when rules affecting your product change
  • Drift detection — new compliance gaps flagged as you ship features
  • Quarterly Technical Certificate refresh — keep your certificate current
  • Priority CTO access for compliance questions
  • 30-day cancellation notice · no long-term contract

30-day cancel notice · Quarterly certificate · No contract

Enterprise
Compliance Enterprise
Coming Soon
Legal partner being finalised
Join the waitlist for priority access
Who this is forScale-ups and enterprises where compliance documentation must carry legal weight — signed off by a qualified solicitor, not just a technical CTO. Required for regulated markets and enterprise procurement.
What's included
  • Everything in DFY Setup + Monitoring
  • Legal partner (solicitor) review of your full compliance posture
  • DPA facilitation — Data Processing Agreements with your vendors
  • Jurisdiction-specific legal assessment (GDPR, UK GDPR, EU AI Act)
  • Attorney-issued compliance certificate — legally backed, not just technical
  • Priority onboarding and named legal contact

Priority access · Notified first when live

All tiers: 30-day cancellation notice  ·  10% discount on annual prepay  ·  Compare all plans →

FAQ

Questions before you commit.

Will this make me technically compliant?
This scan identifies what technical compliance measures are missing and gives you templates and a roadmap to implement them. Implementing our recommendations puts you in a strong technical compliance posture — we document every step. This is an automated technical assessment, not legal advice. It identifies gaps and provides fixes; a lawyer determines whether you meet applicable legal standards. For CTO-implemented fixes and a Technical Implementation Certificate, see our DFY Compliance Setup.
What is the difference between this and DFY Compliance Setup?
The Compliance Score ($799) tells you where you stand and gives you everything to fix it yourself — report, templates, roadmap. DFY Compliance Setup ($2,999) means our Fractional CTO implements every fix for you — code changes and policy documents — and we issue a Technical Implementation Certificate confirming every item was addressed. The $799 you pay for the Score is credited toward the $2,999 DFY, so you only pay $2,200 more to upgrade.
My app does not have EU users yet. Do I still need this?
GDPR applies to any EU citizen who accesses your app, regardless of where your company is based. EU AI Act Article 50 applies to any AI system accessible to EU users. If your app is publicly accessible, you almost certainly have EU users. With enforcement beginning August 2, 2026, this is time-sensitive.
How is this different from a cookie consent tool?
Cookie consent tools only manage cookies. We check 60 compliance requirements — including EU AI Act AI disclosure obligations, ISO 27001 Annex A controls, your data rights mechanisms, the completeness of your privacy policy, and SOC 2 technical foundations. One scan covers everything.
How is this different from AIComply or similar EU AI Act tools?
Most EU AI Act compliance tools — including AIComply — are built for operators managing internal AI tools: helping a company track what AI tools their staff use and train them on EU AI Act obligations. That is a real need, but it is a different problem. We are built for founders who ship AI products to customers. We check whether your product — the thing you deployed — meets GDPR, EU AI Act transparency obligations, SOC 2 foundations, and ISO 27001. If you are building a product, not just using AI internally, this is the assessment you need. They audit your tools. We audit your product.

Your regulator doesn't wait. You shouldn't either.

EU AI Act enforcement begins August 2, 2026. Check your compliance now — 3 minutes, $799.

$799 one-time · Credit toward DFY Compliance Setup · No legal firm needed to get started