EU AI Act in force — Documentation duties have been enforceable since August 2025. Are you compliant yet?
EU AI Act · Mandatory since August 2025
Document your EU AI Act compliance,
protect your reputation and optimize the cost of doing so.
Regulation (EU) 2024/1689 requires you to document, trace and audit every AI system you use. Needine gives you the technical infrastructure to evidence it — sealed, verifiable records and tools to document your obligations — without you having to build or maintain it.
- No in-house technical team
- Verifiable certificates
- Live in 48 hours
- Continuous evidence, not one-off
Why you can't ignore it
Non-compliance has a price
The Regulation sets tiered penalties depending on the severity of the breach.
€35M / 7%
Maximum fine for prohibited practices (Art. 5)
Up to €35 million or 7% of annual global turnover, whichever is higher.
€15M / 3%
For breach of general obligations
Applies to high-risk requirements, transparency, technical documentation and activity logs. For SMEs and start-ups, the lower of the percentage and the fixed cap applies.
The alternative
Build it in-house or outsource it?
Build internally
- 6-18 months of estimated development
- You need legal, technical and security profiles
- The regulation evolves — continuous maintenance
- No guarantee your interpretation is correct
- Cost >€100K in year 1 for a serious implementation
Use Needine
- Live in 48 hours, not months
- We update whenever the rules change
- Certificates verifiable by third parties
- Free: no plans, no card required
- Your engineering team stays focused on the product
What you no longer need to build
8 critical EU AI Act pieces Needine helps you with
When a company uses needine.com, it outsources the technical evidence layer of compliance. You don't have to invest in teams, infrastructure or maintenance to sustain each of these components.
Sealed records of AI activity
Each record seals the model, version, steps, input/output hashes, human review and outcome, so you can evidence the logging that Art. 12 asks for. Prompts and files stay with you: Needine only receives their hashes.
Signature and timestamp
Every record is signed with Ed25519 keys managed by Needine and gets an RFC 3161 timestamp within the hour. No need to set up internal PKI, key rotation or cryptographic custody.
Blockchain anchoring (Arbitrum One)
We anchor the Merkle root of your organization's records on Arbitrum One, so any later change is detectable. No need to run nodes, manage gas, corporate wallets or a Web3 team.
Documented human-in-the-loop
We record who approved each AI decision, when and with which role, so you can evidence the human oversight of Art. 14. No need to build your own auditable approval flow.
Trust score and risk register
Each record gets a 0–100 score from 8 fixed checks (signature, anchor, provenance, metadata…), and a register lets you document risks by phase (Art. 9).
System technical documentation
A guided Annex IV record (system description, data used, metrics, controls and limitations) with a completeness check and export, to prepare what you hand over to the regulator.
Reports for competent authorities
Exports (PDF + signed JSON) you can hand to AESIA, AEPD or other market surveillance authorities, without designing internal templates.
Public certificate verification
Any third party can verify the integrity of a certified document at needine.com/verify. Your company doesn't have to build a public verification portal.
What you don't need in-house
Covered by Needine
- ✓Internal team for EU AI Act technical compliance
- ✓In-house PKI and key custody for digital signing
- ✓Nodes, wallets or in-house blockchain expertise
- ✓A record-keeping system where any tampering is detectable
- ✓Audit and public verification portal
- ✓Tooling to prepare the Annex IV documentation
- ✓Trust scoring and a risk register
- ✓Manual procedures to record human oversight
Still yours
Your responsibility as an organisation
- •Define the purpose and use cases of AI in your organisation
- •Classify your systems (limited, high, prohibited risk)
- •Approve internal policies and train your teams
- •Decide which documents and processes to certify with Needine
Needine doesn't replace the legal owner of the AI system: it provides verifiable technical evidence and helps you document your obligations, but it does not certify compliance.
The process
From zero to documented in 3 steps
Inventory your systems
Register what AI you use, for what and in which context. We guide you through the risk classification.
Connect or seal from the console
API integration, or seal from the console: files are hashed in your browser and never uploaded. Needine helps you prepare the technical documentation.
Certify and audit
You get verifiable certificates and a real-time dashboard of what you have documented, to show at an inspection.
The clock is already ticking
The Regulation entered into force in August 2024. The first obligations have been enforceable since August 2025.
If your company uses AI, you are already within the scope of application.
Aug 2024
Regulation enters into force
Aug 2025
Prohibitions and transparency duties
Aug 2026
Full obligations for high-risk systems
Aug 2027
Full application to all operators
Start certifying your AI processes today
Create a free account, connect your first use case and get certificates that are signed, timestamped and anchored on blockchain, ready for an audit.