Article 26(1)ATTEST
Use AI in line with the instructions
Policy attestation
EU AI Act for MSPs
Sell your clients EU AI Act compliance. Before December.
Your clients are deployers under the EU AI Act. Article 26 obligations land in December 2026, and they cannot see the AI they are accountable for. You can. Deliver the Evidence, and bill for it.
- Article 4 literacy: in force since Feb 2025
- Article 26 deployers: December 2026
- Penalties up to 7% of turnover
- Extraterritorial
The opportunity
Every client with AI is on the clock.
Article 4 AI literacy has applied to deployers since February 2025. The deployer obligations under Article 26 land in December 2026. Your clients are accountable for AI they cannot see, and they will turn to whoever already runs their stack. That is you.
Deployers
Your clients are deployers under the Act. The duties land on them, not just the AI vendor.
Dec 2026
Article 26 deployer obligations: logging, oversight, monitoring, six-month retention.
Up to 7%
Of global annual turnover. The penalty ceiling for the most serious breaches.
Extraterritorial
Like the GDPR. If a client's AI output reaches the EU, that client is in scope.
What Article 26 requires
The deployer obligations, and who produces them.
Northbeams automates the monitoring and retention clauses. Your client attests the rest. The Evidence Pack carries both.
Article 26(2)ATTEST
Assign human oversight
RACI document
Article 26(5)AUTO
Operate and monitor per instructions
Continuous monitoring, per-tool policy
Article 26(6)AUTO
Keep logs at least six months
Signed retention, per tier
Article 26(7)ATTEST
Inform workers' representatives
HR notification record
AUTO = Northbeams produces it · ATTEST = your client signs it
What you deliver
A compliance line you sell once and bill every year.
Deploy it, produce the Evidence, and the renewal writes itself. You set the client price.
Deploy across the fleet
One rollout per client across browser, desktop, CLI, and MCP. No proxy, no MITM cert, no network change at any client site.
Produce the Evidence
A signed Evidence Pack per client, mapped to Articles 4, 12, 13, 14, and 26. Auditor-verifiable from day one.
Bill for it every year
Compliance is a recurring line. You deliver it, you keep the margin, and the deadline renews the demand.
The AI System of Record
The clock your clients are already on.
One platform. Two products. Browser, desktop, CLI, MCP. The same rollout produces the Evidence for every client, ahead of the December 2026 deadline.
Feb 2025
Article 4 AI literacy in force
Feb 2026
High-risk obligations, Annex III
Dec 2026
Article 26 deployer obligations
Get ahead of it
Get your clients ahead of December.
Book a 30-minute readiness call. We scope a paid evaluation that produces the signed Evidence Pack your client's auditor accepts, and a plan to roll it across your book.
General orientation, not legal advice. Refer to Regulation (EU) 2024/1689 for the consolidated text of the Act.