Short answer: A specialist consulting engagement for one high-risk AI system typically costs €15,000-€80,000. Enterprise programmes run €100,000-€300,000+. Compliance software like Aurora Trust starts at €49/month and automates the classification and documentation, with a focused legal review before signing. For most SMEs with one or two systems, total compliance cost can be kept well under €5,000.
The three ways to comply - and what each costs
There is no single price for EU AI Act compliance because there is no single way to do it. The cost is driven almost entirely by the method you choose:
| Method | Typical cost | What you get | The catch |
|---|---|---|---|
| Specialist AI-regulation lawyer / consultant | €15,000-€80,000 per system | Bespoke classification, documentation, conformity review | Static - redone and re-billed when the AI or the law changes |
| Big Four / enterprise consulting programme | €100,000-€300,000+ | Organisation-wide governance framework | Priced for large enterprises, not SMEs |
| DIY (in-house, spreadsheets) | Staff time only | Full control | Slow, error-prone, hard to keep audit-ready |
| Compliance software (Aurora Trust) | From €49/month | Automated classification, audit-ready docs, monitoring | Edge cases still warrant a legal review before signing |
Where the money actually goes
A high-risk AI system's cost is the sum of its obligations. Understanding the pieces is what lets you decide which to automate and which to pay a specialist for:
- Risk classification - determining the tier and which Annex III categories apply. Repeatable; ideal to automate.
- Technical documentation (Article 11) - the largest single line item done manually; a structured document set. Highly automatable.
- Risk management system (Article 9) - an ongoing, documented process, not a one-off report.
- Data governance (Article 10) - training data quality and bias examination, documented.
- Transparency & explainability (Articles 13, 50) - plain-language reports for deployers and affected people.
- Conformity assessment & declaration (Articles 43, 47) - the part where a legal review genuinely earns its fee.
- Ongoing monitoring & updates - the recurring cost most consulting quotes quietly leave out.
The cost of doing nothing
Compliance has a price, but non-compliance has a bigger one - and it is the number that should frame the whole decision:
| Violation | Maximum fine |
|---|---|
| Prohibited AI practices (Article 5) | €35 million or 7% of global annual turnover |
| High-risk AI non-compliance | €15 million or 3% of global annual turnover |
| Incorrect information to authorities | €7.5 million or 1% of global annual turnover |
And fines are only the visible cost. Non-compliance increasingly means lost deals - enterprise buyers and public-sector procurement now ask for AI documentation as a condition of purchase - plus the reputational damage of a public enforcement action. For many SMEs, the deal you cannot close is more expensive than the fine you might one day pay.
How SMEs keep the cost down
The lowest-cost compliant path for most small and mid-sized businesses is not the cheapest tool or the most expensive lawyer - it is the right split of work:
- Automate the repeatable work - classification, technical documentation, and monitoring, with software from €49/month.
- Reserve legal spend for judgement - a focused review of the conformity declaration and any genuine edge cases, not the whole document set.
- Start early - rushed compliance near a deadline attracts premium consulting rates. Spreading the work over months is materially cheaper.
- Document once, reuse across frameworks - the same evidence maps to NIST AI RMF, ISO 42001, GDPR, NIS2, and DORA, so you are not paying to redo it per regime.
The deferral does not cut the cost. High-risk obligations were provisionally deferred to 2 December 2027, but the agreement is not yet law, transparency rules still apply from 2 August 2026, and a compliant high-risk system takes months to build. Waiting shifts the same cost later - often at a higher, deadline-driven rate.
Frequently asked questions
How much does EU AI Act compliance cost?
Consultants typically charge €15,000-€80,000 per high-risk system; enterprise programmes €100,000-€300,000+; software such as Aurora Trust starts at €49/month. Most SMEs with one or two systems can keep the total well under €5,000 using software plus a focused legal review.
What is the cheapest compliant way?
Software for the repeatable documentation, plus qualified legal counsel to review and sign the conformity declaration. This avoids paying consultant rates for work software can do, while keeping a lawyer in the loop for the parts that need judgement.
What does non-compliance cost?
Up to €35 million or 7% of global turnover for prohibited practices, and up to €15 million or 3% for high-risk non-compliance - plus lost deals and reputational damage.