Draft Standards — EU AI Act Compliance Audit System for Consultants

See the Transformation

This is what your client’s documentation looks like — before and after.

Real examples from the 3-prompt audit workflow. Vague policy language becomes specific, article-mapped, defensible text.

Before“Qualified personnel review system outputs on an ongoing basis to ensure candidates are treated fairly.”

After“The AI Governance Lead reviews all system outputs where the confidence score exceeds 0.7 before any hiring decision is finalised. Reviews completed within 24 hours. Override authority: the Governance Lead may suspend system recommendations pending investigation.”

Changes traced to Article 14(1), 14(4)(a), 14(4)(b). Gap severity: Critical.

Before“The system has been designed and tested in accordance with relevant standards and best practices.”

After“Validation conducted per Annex IV(3): training dataset of 145,000 labelled samples from EU employment records (2019–2024), bias tested across 9 protected characteristics per Article 10(2)(f). Test results: 94.2% accuracy, false positive rate 3.1%, documented in Technical File Section 4.”

Changes traced to Annex IV(2)(b), IV(2)(d), IV(3), Article 10(2)(f). Gap severity: Critical.

Before“Risks will be identified and mitigated through appropriate measures on an ongoing basis.”

After“The DPO conducts a risk assessment quarterly using the framework in Appendix C, covering: data quality degradation, model drift exceeding 5% accuracy threshold, emerging bias patterns, and regulatory changes. Findings reported to the AI Governance Board within 5 business days. Mitigation plans logged in the Compliance Register.”

Changes traced to Article 9(2), 9(5), 9(7). Gap severity: High.

What Your Client Receives

Six professional deliverables. Every engagement.

The prompts generate the analysis. You review, customise, and deliver. The system handles 80% of the work — your expertise makes it client-ready.

📋

Executive Compliance Brief

2–3 page summary for senior leadership and the board. Risk classification, key findings, recommended actions.

🔍

Detailed Findings Report

Article-by-article gap report with severity rankings: Critical, High, Medium, Low. Mapped to specific regulation references.

📄

Revised Documentation

Complete rewrite of the client’s compliance document with every identified gap addressed. Ready for legal review.

📝

Change Log

Every revision mapped to the specific article and finding that required it. Full audit trail for the client’s records.

🗺

Implementation Roadmap

Prioritised action plan with timelines for anything that requires organisational change beyond document revision.

📈

Gap Log (Excel)

Tracked findings template for ongoing compliance management. Sortable by severity, article, and status.

The Engagement Model

How a client engagement works, end to end.

Scope to delivery in 8–16 days. Approximately 15–20 hours of your time for a full 12-document compliance sprint.

Phase	Duration	Client Deliverable	Your Work
1. Scoping	1–2 days	Classification Memo	Identify AI systems, classify risk, determine provider/deployer role
2. Document Collection	1–3 days	Document inventory	Client provides existing compliance documentation
3. Audit	2–5 days	Gap Report + Stress Test	Run Prompt 1 + Prompt 2 on each document
4. Remediation	3–5 days	Revised docs + Change logs	Run Prompt 3, review, customise for client context
5. Delivery	1 day	Executive Brief + Roadmap	Package outputs, present findings, recommend next steps

The economics: A full 12-document compliance sprint takes ~15–20 hours of your time. At €25,000, that’s €1,250–€1,670 per hour. The client’s alternative is a Big 4 engagement at €50,000–€150,000. You are the efficient, specialised option.

Your Methodology

The 4-Lens Compliance Framework

Every document is audited through four dimensions. Present this to clients as your structured QA methodology — it’s your intellectual property to use.

Regulatory Structure

All required elements present? Correct risk classification? Correct role identification? Annex IV completeness? Article 17 coverage?

Language Precision

Article 3 term consistency. Every “where feasible” and “appropriate measures” flagged. Implementability Test: WHO does WHAT by WHEN, verified HOW.

Operational Feasibility

Can procedures be implemented? Are resources identified? Are timelines realistic? Is incident reporting achievable within 15 days (Article 73)?

Adversarial Vulnerability

What would a hostile auditor find? Scope gaps, perverse incentives, accountability laundering. Read the document like a prosecution attorney.

The Workflow

Three prompts. 30 minutes. Copy, paste, audit.

Works in ChatGPT, Claude, Gemini, or your client’s approved enterprise AI. Documents never leave their security perimeter. Works in any EU language.

Compliance Audit — 5 min

Article-by-article gap report. Severity rankings. Compliance scorecard. Executive summary.

Regulatory Stress Test — 5 min

Opponent’s brief: your client’s document read by a hostile regulator. Exploitable weaknesses. Fine exposure mapped to Article 99.

Full Document Patcher — 10 min

Complete revised document. Change log mapping every revision to the article that required it. Before/after scorecard.

🇩🇪 German 🇫🇷 French 🇳🇱 Dutch 🇮🇹 Italian 🇪🇸 Spanish 🇵🇱 Polish 🇵🇹 Portuguese + all EU languages

Included: Practice Launch Programme

The 18-page Consultant Playbook

Not just prompts — a complete guide to offering EU AI Act documentation auditing as a professional service. No prior knowledge of the Act required.

The EU AI Act: What Your Clients Need to Know

Brief any client on the Act’s scope, deadlines, and fine structure. 20 min read.

Risk Classification: The First Client Question

Classify client AI systems and determine their specific obligations. 15 min read.

The 4-Lens Framework: Your Audit Methodology

Run a structured documentation audit on any compliance document. 25 min read.

Running a Client Engagement End-to-End

Scoping call → document collection → audit → review → delivery. 25 min read.

Positioning, Pricing, and Selling This Service

Per-document pricing (€1,500–€3,000), full sprint pricing (€15,000–€35,000), retainer models, and your first meeting script. 15 min read.

Total reading time: ~100 minutes. Included in the System and Agency tiers.

Pricing

Choose your tier

Every tier includes a commercial licence for client work. No per-project fees. No subscription. One payment, perpetual access.

Toolkit

$249

For compliance leads and DPOs auditing their own documentation.

3 core audit prompts (Audit, Stress Test, Patcher)
4-Lens Compliance Framework Playbook (PDF)
25-point compliance readiness checklist
Gap Log + Change Log templates (Excel)
Prompt Hub — searchable offline app (HTML)
Unlimited documents. Any EU language.

Start Your Audit →

A consultancy charges €20,000–€50,000 for the same work.

System

$699

Pilot: $489 — code EUAI30

25 of 25 remaining

For consultants launching a practice and teams who deliver to clients or leadership.

Everything in Toolkit
18-page Consultant Playbook — regulation, classification, methodology, engagements, pricing
5 Pro Prompts: Executive Brief, Gap Log, Before/After Table, Findings Report, Implementation Roadmap
Prompt Hub with all 8 prompts
Commercial licence — unlimited client projects

Get the System — $489 →

One engagement at €2,000–€5,000 covers the cost. Everything after is margin.

Agency

$1,499

$150/user — up to 10 users

For firms that need every consultant on the same methodology. One framework, consistent quality, every language.

Everything in System, for up to 10 named users
Team Licence Certificate
Unlimited client projects across all users
One payment. Perpetual. No per-seat subscription.

Licence Your Team →

10 consultants × 2 audits/week × €2,500 = €100,000/quarter.

🛡

30-day guarantee

Run the 3-prompt audit on your most complex compliance document. If it doesn’t identify at least 5 article-mapped compliance gaps and produce a revised document you’d confidently present to a paying client, email hello@draftstandards.com with your order ID for a full refund. No questions. No forms.

Free Resource

The EU AI Act: A Practical Guide

267 pages. Classification, obligations, timelines, and documentation requirements. Give it to prospects — it positions you as the expert before the first meeting.

Free. No spam. Instant delivery to your inbox.

FAQ

Common questions

What AI tools does this work with?

Any large language model: ChatGPT (GPT-4), Claude, Gemini, or your client’s approved enterprise AI. The prompts are plain text — copy, paste, run. No API or software needed.

Can I white-label the outputs for clients?

Yes. All tiers include a commercial licence. The deliverables are designed to be reviewed, customised with your branding, and presented to clients as your work product. You cannot redistribute or resell the prompts themselves.

What about client data confidentiality?

Documents are pasted into your own AI tool — Draft Standards never sees client documents. If your client uses an enterprise AI tool with data processing agreements, documents stay within their existing security perimeter. Works with redacted documents and on-premise AI tools.

Does this work in other languages?

Yes. Paste documentation in German, French, Dutch, Italian, Spanish, Polish, or any official EU language. The audit and revised document are returned in the same language. This means you can serve clients across the entire EU without translation costs or native-speaker hires.

Does this make my client compliant with the EU AI Act?

No. This is a documentation quality audit methodology, not a legal compliance service. It checks whether documents address what the Act requires, use precise language, and would survive regulatory scrutiny. You and your client are responsible for final compliance decisions.

What’s the difference between Toolkit and System?

The Toolkit gives you the 3 core audit prompts — enough to audit any document. The System adds 5 Pro Prompts for client-ready deliverables, the 18-page Consultant Playbook (regulation, classification, methodology, engagement model, pricing), and the full Prompt Hub. If you serve clients, the System pays for itself on the first engagement.

How long does it take to start delivering to clients?

The Consultant Playbook is designed to be completed in ~100 minutes. Combined with the prompts, you can run your first audit the same day. Module 4 walks you through a complete engagement end-to-end. Module 5 includes pricing models and a first meeting script.

My clients are outside the EU. Does the AI Act apply to them?

If their AI system is placed on the EU market, or the output is used in the EU, the Act applies regardless of where they are based (Article 2). This includes US, UK, and Asian companies serving European clients or customers.

Launch an EU AI Act compliance practice this week.