The deadline desk
Since , EU users must be told when they are talking to an AI (Reg. (EU) 2024/1689, Art. 50 (opens in a new tab)). From , EU-market software must report exploited vulnerabilities (Reg. (EU) 2024/2847, Art. 14 (opens in a new tab)). I implement the fix — fixed fee, fixed duration — and hand you the dated evidence. I don’t give legal advice.
Core engagement: €2,500 fixed · 10 working days — every price is on the pricing page.
Email the deskSee the deadlines
elapsed next to bind
One mark per week, from to — 5 dated obligations fall inside it. Next to bind: Cyber Resilience Act — Article 14 reporting — . Ledger as of .
A supplier with no clients yet cannot show you a logo wall. It can show you its working.
No hourly billing, no “contact us for pricing”, no “from”. Each offer ends in an evidence pack — the dated record of what was implemented and against which obligation. Evidence pack or no fee: every engagement ends with a dated evidence pack. If I don’t deliver it, you don’t pay the closing half.
€2,500 fixed· 10 working days
The Article 50 disclosure and marking implemented in your product, with a dated evidence pack proving what was done, when, and against which article.
Any business showing EU users an AI chatbot or publishing AI-generated content — including US companies whose output is used in the EU.
$2,500 fixed· 10 working days
An operating reporting process — intake channel, triage runbook, the 24 h / 72 h / 14 d workflow, named roles and a dry-run — not a document.
Manufacturers of products with digital elements on the EU market — obliged to report actively exploited vulnerabilities from 11 September 2026.
$750 diagnostic, credited in full· diagnostic 1 week · remediation 2–4 weeks
A $750 diagnostic credited in full against a fixed-price remediation ($2,500–8,000 by defect count): exposed keys, missing row-level security, no rate limiting — found, fixed, verified, documented.
Founders and agencies whose AI-built application (Lovable, Bolt, Cursor, v0) works — and is about to carry real customers.
$2,500 audit· audit 2 weeks · remediation 2–6 weeks
Real code remediation against WCAG 2.2 AA — not an overlay widget — with a re-test, a conformance statement, and the written remediation record your counsel actually needs.
Businesses facing an accessibility demand letter or lawsuit, an EAA obligation, or a procurement team asking for a VPAT.
The full price ladder, including the€2,950 fixed creditable diagnostic →
It usually starts with a specific, checkable observation about your site or product — a missing disclosure, an absent security.txt, a failing check. Not a pitch; a fact you can verify yourself in one minute.
A twenty-minute scoping call, then a fixed price and a duration in working days, with the scope limit stated in writing. If the scope is genuinely unclear, the €2,950 fixed diagnostic sizes it —credited in full against any remediation engagement started within 60 days.
I make the change in your product, on your infrastructure, with your access controls. Half the fee on start, half on delivery.
Screenshots, the code change, DOM proof, and a dated statement of what was implemented and against which article — the document your counsel, auditor or customer actually asks for.
Consultancies produce recommendations and law firms produce opinions. Almost nobody at the compliance layer makes the change in the product itself. This desk exists for the implementation and the evidence of it.
Much of the advisory market spent a year preparing clients for the high-risk AI regime — which was deferred to . Article 50 held its date and is in force now. The ledger on this site tracks what is actually binding, with sources.
The Commission publishes exemptions from the marking obligation — source code, machine-to-machine output, standard editing assistance. Knowing what is not required is how a job stays small, fixed-price, and honest.
No invented clients, no testimonials, no counters. A dated “last reviewed” stamp on every page, a source behind every number, and a sample evidence pack you can inspect before paying anything.
Sophura is one engineer: David Kumi. I work the European business day on GMT+0 — your working day is my working day, which is why this desk covers European obligations. Working day 09:00–17:00 UTC (GMT+0) — the European business day. Email answered within one business day. More about the desk and how it works →
They should — I’m not a lawyer and I don’t give legal advice. Your counsel decides what you’re obliged to do; I’m the one who makes the technical change in your product and hands you dated evidence that it was done. Most law firms don’t touch the code.
That’s a legal question, and it’s genuinely yours to answer with counsel. What I can tell you is what your site or product currently does — a specific, checkable observation. If you want it sized properly, the fixed-scope diagnostic is €2,950 fixed and it is credited in full against any remediation engagement started within 60 days.
Often nothing — in-house is frequently the right call. The part teams underestimate is the evidence: a dated record of what was implemented, by whom, against which article, with proof. If you’d like the outline of what that record should contain, email me and I’ll send it — free.
The disclosure itself is an afternoon. What you’re buying is the scoping — including what you are NOT required to mark, which is where most teams over-build — and the documented evidence pack. On the exposure: the headline ceiling is €15,000,000 or 3% of turnover, whichever is higher — but Article 99(6) inverts that for SMEs and start-ups to whichever is lower, so a smaller company’s real ceiling is far below the number usually quoted. I would rather size it to you than quote you a scary one.
Accra, on GMT+0 — the same clock as London, an hour behind Berlin, so your working day is my working day. Working day 09:00–17:00 UTC (GMT+0) — the European business day. Fixed fee, fixed duration, and the deliverable is a documented change in your own systems — nothing leaves your infrastructure.
Honestly: these obligations are new — Article 50 went live on 2 August 2026 — so nobody has a long track record on them, including firms charging five times more. What I can show you before you pay anything is a sample evidence pack, so you can see exactly what you’d get. I publish prices instead of testimonials.
Last reviewed· Every dated claim on this page links to its source.
Tell me the deadline you are looking at and what your site does. You get a straight answer about whether it applies to you, and a fixed price if it does.
Direct to hello@sophura.com · one person, named, who answers. I don’t give legal advice.