EU AI Act · ISO 42001 · High-Risk AI Governance

AI
Governance
That
Holds.

Days to full enforcement

—.

2026-08-02

Independent EU AI Act compliance advisory for mid-market organizations deploying high-risk AI in Spain, France, and across the EU. Practitioner-led. Audit-ready. No generalist playbook.

Request a review Our services

€486M

CNIL fines
France 2025

9×

Fine increase
year-on-year

€35M

Max penalty
EU AI Act

7%

Global turnover
alternative cap

What we do

Six
practice
areas.

We work exclusively in EU AI governance — mapping risk, building management systems, and preparing documentation that survives regulatory scrutiny.

01

EU AI Act Readiness Assessment

Structured classification of your AI systems against Annex III risk categories. We map prohibited practices, high-risk obligations, and documentation gaps before your next regulatory encounter.

4–6 weeks 02

ISO 42001 Implementation & Audit Preparation

AI Management System design aligned to ISO/IEC 42001. We build your AIMS documentation stack — policies, risk registers, Annex A controls — structured for audit from day one.

8–12 weeks 03

High-Risk AI Governance Advisory

Ongoing advisory for organizations operating biometric, emotion AI, HR, or credit systems under Annex III. Human oversight design, technical documentation, DPIA integration.

Retainer 04

AEPD & CNIL Regulatory Navigation

Jurisdiction-specific compliance mapping for Spain and France. We translate each authority's enforcement posture into operational requirements your teams can actually execute.

Project-based 05

AI Ethics Board & Governance Design

Structuring internal AI ethics committees aligned with Article 9 requirements. Terms of reference, escalation protocols, and oversight architecture built for accountability.

Workshop 06

AI Literacy Training

Article 4 AI literacy obligation training for technical and non-technical teams. Delivered in English, French, or Spanish. Documented for regulatory evidence requirements.

In-person / Remote

About the practice

20
Years.
One
Pivot.

ethicalai.consulting is a specialist EU AI Act advisory practice led by Bastien Buffet — combining ISO/IEC 42001 Lead Auditor certification (in progress), MIT Applied AI & Data Science credentials, and two decades of senior client advisory across Europe's most demanding sectors.

We operate exclusively in EU AI governance. A practitioner who can engage regulators, engineers, and boards in the same conversation.

Work with us
ISO/IEC 42001 Lead Auditor — PECB (in progress) PECB certification exam currently in progress. The primary international standard for AI Management Systems, directly mapped to EU AI Act obligations.
MIT Applied AI & Data Science Certificate programme covering applied machine learning, deep learning architectures, and model evaluation in regulated contexts.
Databricks Certified & AWS Cloud Practitioner Technical fluency in the data and cloud infrastructure where most high-risk AI systems are built and deployed.
20+ years senior advisory, EU markets Spain, France, and pan-European client engagements across fashion, luxury, and creative sectors — industries now actively navigating AI governance obligations.
Research: Facial Emotion Recognition & EU AI Act Applied ML research comparing EfficientNet V2, ConvNeXt V2 Nano, ViT-Tiny, and SigLIP2 on AffectNet data across 8 emotion classes — framed through Article 5(1)(f) compliance. MIT capstone project.

Insights

Practitioner
Analysis.

All articles →

Uncategorized

Hello world!

April 2026 →

Get in touch

Start with
a Review.

Tell us about your AI systems and where you are in your compliance journey. We respond within 48 hours with a frank assessment of what's urgent.

Based in

Ibiza, Spain — serving EU-wide

Email

hello@ethicalai.consulting

Working languages

English · French · Spanish

Response time

Within 48 hours

Days until full EU AI Act enforcement

—

2026-08-02 — High-risk AI, all sectors