Claude Code · AI Security · EU AI Act
We Build the AI Agents Your Business Runs On.
Custom AI agents and automations, built with Claude Code in weeks, not quarters. We harden the AI you ship and keep you compliant with the EU AI Act, and we can train your engineers to do it too. Production-grade, not a prototype: we run our own company on a 200+ component agent stack. Fixed price per project, scoped to the work: a paid diagnostic at EUR 490, automations from EUR 700, production agents from EUR 3,500.
Last updated
We Build It, You Run It. Built With Claude Code.
You bring the workflow that wastes hours, we build the AI agent or automation that runs it and ship it to production. The engine is Claude Code. We run our own company on a stack...
- Claude Code workshops for your engineering team (1-day and 3-day)
- Workshops are delivered by our CTO, not handed to a subcontractor
- Production agent stacks: sub-agents, hooks, MCP, skills
Agents On Top Of MuleSoft, Talend And Your Data Platform
Most companies that need an AI agent already run an integration or data platform they paid a lot for. You do not need to replace it. We build the agent on top of what you already...
- Agents that call your existing MuleSoft or Talend flows instead of duplicating them
- Business process agents on top of your lakehouse data, Databricks and similar
- Adapted from agents we already built and run in production, not started blank
Find and Fix AI Vulnerabilities
Your AI systems are under attack. Prompt injection, data poisoning, model extraction, and adversarial inputs are real threats that most organizations are not prepared for. We...
- AI security audits and vulnerability assessments
- Prompt injection detection and defense
- LLM red teaming and penetration testing
Automate Your Compliance Workflows
Manual compliance is expensive and error-prone. We build automated systems that handle documentation generation, audit trail creation, monitoring alerts, and compliance reporting...
- Automated compliance documentation generation
- Continuous AI system monitoring and alerting
- Audit trail automation and evidence collection
How We Work
Assess
Map your AI systems and identify which fall under regulation
Classify
Determine risk category for each system per Art. 6 + Annex III
Document
Build technical documentation, risk assessments, audit trails
Monitor
Ongoing compliance monitoring, drift detection, regulatory updates
Frequently Asked Questions
Common questions about our services, process, and pricing
A paid AI Diagnostic is 490 EUR and takes 5 working days, and it is credited in full against a build you start within 30 days. A fixed-price automation of one workflow is 700 to 1,500 EUR over 1 to 2 weeks. A production agent starts from 3,500 EUR and runs 3 to 8 weeks, with large production builds reaching 25,000 EUR. Keeping it running afterwards starts at 290 EUR per month. Final price depends on scope and is fixed before we start.
Yes. We integrate with the tools and data you already use (Gmail, Jira, CRM, internal APIs) and the agent runs in your environment. You get the code, handover documentation, and a roadmap, so your team owns and operates it after we leave. We secure every agent we ship against prompt injection and data leakage as part of the build.
The EU AI Act is the world's first comprehensive AI regulation. It applies to any organization that develops, deploys, or distributes AI systems in the EU market, regardless of where the company is based. If your AI system is used by EU citizens or operates within the EU, you likely need to comply. We help you determine which requirements apply to your specific AI systems.
Enforcement is phased. Prohibited AI practices (social scoring, manipulative AI) were banned in Feb 2025. GPAI obligations are already in effect since Aug 2025. Article 50 transparency obligations apply from Aug 2026. High-risk standalone systems (Annex III) apply from Dec 2027 and embedded safety components (Annex I) from Aug 2028, a timeline adopted by the EU Parliament on 16 June 2026 and by the Council on 29 June 2026. The sooner you start preparing, the less disruptive compliance will be. We help you build a timeline based on your specific AI systems and risk levels.
A standard AI security assessment takes 2-4 weeks depending on the number of AI systems, their complexity, and the depth of testing required. This includes threat modeling, prompt injection testing, data leakage analysis, architecture review, and a detailed remediation report. Ongoing monitoring engagements are scoped separately based on your needs.
We test against the full spectrum of AI-specific threats: prompt injection (direct and indirect), data poisoning, model extraction, adversarial inputs, output manipulation, data leakage, privilege escalation through AI, and insecure tool use. Our testing methodology aligns with the OWASP AI Security and Privacy Guide and the OWASP Top 10 for LLM Applications.
Yes. AI compliance and security are not one-time projects. Regulations evolve, new vulnerabilities emerge, and AI systems change over time. We offer monthly retainers for ongoing compliance monitoring, security retesting, documentation updates, and regulatory change tracking. All initial engagements include 30 days of post-delivery support.
We quote fixed prices per project, scoped to the work, and never open-ended hourly billing. A paid diagnostic is 490 EUR and is credited in full against a build started within 30 days. A single automated workflow is 700 to 1,500 EUR. A production agent starts from 3,500 EUR, with large builds reaching 25,000 EUR. Ongoing support starts at 290 EUR per month.
Yes, that is our key differentiator. Unlike pure legal consultancies, we can both interpret the regulation and implement the technical controls. We prepare compliance documentation, build human oversight mechanisms, set up monitoring systems, and integrate compliance checks into your development pipeline. We work alongside your legal team when needed.
We have worked with SaaS platforms, fintech companies, healthcare organizations, and e-commerce businesses on AI compliance and security. Our approach focuses on understanding your specific AI systems and risk profile rather than applying generic templates. This means our recommendations are practical and tailored to your actual compliance needs.
We combine regulatory expertise with hands-on engineering capability. Most compliance firms give you a report and leave. We classify your AI systems, write the documentation, build the monitoring tools, and automate the ongoing compliance workflows. You get both the assessment and the implementation from the same team, which means fewer handoffs and faster results.
409 days until EU AI Act high-risk obligations apply, with penalties up to EUR 15M or 3% of global revenue
EU AI Act Risk Categories
Prohibited
Social scoring, real-time biometric ID in public, emotion recognition at work. Banned since Feb 2025.
High Risk
HR/recruitment, healthcare, credit scoring, law enforcement, critical infrastructure. Full compliance by Dec 2027 (Annex III standalone), Aug 2028 (Annex I embedded).
Limited Risk
Chatbots, content generation, deepfakes. Transparency obligations - users must know they interact with AI.
Minimal Risk
Analytics, recommendations, internal tools. No mandatory requirements, voluntary codes of conduct.
EU AI Act Implementation Timeline
Feb 2025
Already in effect
Prohibited practices banned + AI literacy (Art. 4) required for all companies
Aug 2025
Active now
GPAI model obligations + sanctions framework active
Aug 2026
Approaching
Article 50 transparency: chatbot disclosure, deepfake labelling. Watermarking follows Dec 2026
Dec 2027
Upcoming
High-risk standalone (Annex III) applies Dec 2, 2027; embedded safety components (Annex I) Aug 2, 2028
EU AI Act vs GDPR
You already dealt with GDPR. Here is how EU AI Act compares and what additional work is needed.
| Aspect | GDPR | EU AI Act |
|---|---|---|
| Scope | Personal data processing | AI systems placed on EU market or used in EU |
| Risk approach | Data Protection Impact Assessment (DPIA) | 4-tier risk classification + Fundamental Rights Impact Assessment (FRIA) |
| Documentation | Records of processing activities | Technical documentation, training data records, performance logs |
| Oversight | Data Protection Officer (DPO) | Human oversight mechanisms (Art. 14) |
| Max penalty | EUR 20M or 4% revenue | EUR 35M or 7% revenue |
| Deadline | In effect since 2018 | Art. 50 transparency Aug 2, 2026; high-risk Dec 2, 2027 |
NIS2 + AI Act: Double Compliance
If your company falls under NIS2 (OUG 155/2024), you likely need AI Act compliance too. The same systems that process critical data often use AI. We map the overlap and build a unified compliance framework - one audit process, not two.
15,000+
Romanian entities under NIS2
10M EUR
Maximum NIS2 fine
2%
Of global revenue penalty
Who Enforces the AI Act in Romania
Romania designated national competent authorities in March 2026. We help you prepare for their oversight.
ANCOM
Market Surveillance + National Contact Point
Primary enforcement authority for AI Act. Oversees AI systems on the Romanian market.
ASF / BNR
Financial Sector Oversight
High-risk AI in banking, insurance, capital markets. Joint supervision with ANCOM.
ANSPDCP
Data Protection Authority
AI systems processing biometric data, used in justice, law enforcement, migration, democratic processes.
Ready to build the AI your business runs on?
Book a 30-minute call, on us, to scope what you want built. Not ready yet? Check your AI risk level first.