Welcome to Witness — EU AI Act compliance, self-served
Why we built a self-service compliance toolkit for SMEs instead of another consulting offering.
Updated 25 May 2026 after the EU's Digital Omnibus agreement (7 May 2026): the Annex III high-risk compliance deadline has moved from 2 August 2026 to 2 December 2027 (Annex I to 2 August 2028). Article 50(2) transparency obligations still apply 2 August 2026. See our Omnibus update for the full timeline.
The EU AI Act enters into application on 2 August 2026. Most obligations for high-risk systems, including technical documentation (Annex IV), risk management (Art. 9), and post-market monitoring (Art. 72), apply from that date.
For small and mid-sized companies in Europe, the compliance market so far looks like a choice between two extremes: ignore the regulation, or hire consultants at day rates that price most SMEs out. Witness exists for the middle. We dig into how that middle path actually compares to consultancy in our piece on in-house versus external compliance options.
What Witness is
Witness is a self-service toolkit that takes an SME from "does the AI Act apply to us?" — a question we cover in depth in our SME-focused guide — to "we have the documentation a regulator would expect to see." It includes:
- A risk classifier that walks Article 5, Annex III, and the Article 6(3) exception logic question by question
- A role classifier that determines whether you act as a provider, deployer, importer, or distributor under Chapter III
- Technical documentation aligned to the ten Annex IV sections — preview the downloadable Annex IV documentation template for the structure
- A Fundamental Rights Impact Assessment template for deployers that fall under Article 27
- A risk management system worksheet aligned to Article 9
- An AI literacy module for Article 4 staff-training requirements
Each output is generated from your own inputs. Every question, every field, and every obligation links to the specific article it comes from, so you can check the source yourself. The three-minute classifier is the shortest entry point if you want to feel the article-level discipline first hand.
What Witness is not
- It is not a legal opinion. Complex edge cases — novel high-risk deployments, cross-border conformity assessments, sector-specific overlaps — still benefit from a lawyer.
- It is not a certification body. Conformity assessments under Annex VI or VII stay with the notified bodies and internal processes that the Act defines.
- It does not replace internal governance. It produces the artefacts an internal audit or regulator would expect; your team still has to keep them current.
What's next
This blog will be used sparingly: changes in the regulation, notable implementing acts, and practical notes from the files we see. The changelog tracks product updates release by release.
If you want to check whether your AI system falls under the Act, the classifier is the shortest path — three minutes, no signup.
Check if the EU AI Act applies to you
Free classification in 3 minutes. No signup required.
Get Started