DEWOLF.CO / FIVE-MINUTE CHECK

Does the EU AI Act touch your business?

Ten questions, no data collected, nothing sent anywhere. You get a tier, the roles most affected, and the first thing to do. Operational guidance, not legal advice.

1. EU exposure

Do you sell to clients headquartered in the EU?
Do you sell to UK clients who operate in the EU, or whose campaigns, products, or services reach EU markets?
Do you have staff, an entity, or operations in the EU?

2. AI in your work

Is AI-generated content (text, image, audio, or video) used in anything you deliver to clients or publish?
Do you use AI to profile, segment, score, or monitor identifiable people (customers, audiences, or staff)?
Do you use AI in decisions about people: hiring, screening, promotion, performance, credit, or eligibility?
Do you use AI on biometric data or identification (faces, voices, fingerprints)?
Does AI anywhere in your business process personal or sensitive data (health, finances, protected characteristics)?

3. Control

Do you know every AI tool your people use for work?
Is there a written position on what is approved, what needs permission, and what is prohibited?

WHAT THIS CHECK CAN SEEWhich routes into the EU you have, which triggers your work touches, and how much control you have. That is the map above.
WHAT AN EXPOSURE CHECK ADDSEvery activity, one by one, with its tier, the roles it touches and what changes, plus the three actions that matter first. See it on the sample map.

Copies a plain-text summary you can paste into the note when you book. Nothing is sent from this page.

The exposure check does this properly, in the room, in half a day, for a fixed fee of £1,500 (VAT added where applicable).

What usually follows. The exposure check ends with three actions. Some teams take them on themselves. Where they reach across teams and roles, policy to practice turns them into guardrails, role playbooks, and the communications that carry them, scoped as a set number of days and a defined deliverable.