EU AI Act governance for growing companies

The bridge between your growth and regulation.

One team that understands both law and technology. We bring in verified AI tools and hold the legal side, so your team can adopt AI without waiting on the paperwork.

The call is free. If you don't need an AI officer, we'll tell you.

Your growthRegulation
  • 14 yearsin EU law, from Brussels to Croatia
  • 5,000+EU law advisories delivered
  • 1 unicornbuilt on legal foundations we laid
  • 3 languagesEnglish, Italian, Croatian

Sound familiar?

How many new tools did your team start using this year?

ChatGPT for the first draft. AI to summarise a contract. A new invoicing system. Something a colleague found because it saves time. Each one enters the business in a minute. The questions come later.

  1. 01What did we just send to that system?
  2. 02Where is the data stored, and were we allowed to put it there?
  3. 03On what basis did the AI give that answer?
  4. 04Who has access to the document?
  5. 05What must we be able to prove if someone asks tomorrow?

None of these should stop a good tool. They need someone whose job it is to answer them.

How it works

You choose the tools. We bring them in and hold the legal side.

  1. 1

    We bring in the tools

    Verified AI tools for finance, accounting, HR and sales, set up in your workflow with the legal groundwork done before day one.

  2. 2

    We hold the legal side

    EU AI Act, your internal AI policy, documentation and vendor contracts, all aligned with privacy law. The paperwork is ours.

  3. 3

    You grow

    Try something new without waiting on regulation. Your team stays your team. We are the reinforcement, and the support when you need it.

What your AI officer does

Four things. One licence. One team that answers.

Everything a company using AI needs to have in order, done for you and kept current.

01

AI inventory and risk map

Which tools you use, where the data goes, and what the AI Act requires of each one.

  • Tool-by-tool inventory
  • AI Act role and risk classification
  • Readiness memo you can hand to a board or a buyer

02

Policies and documentation

Written, aligned and signed. Your team just uses them.

  • Internal AI policy and acceptable-use rules
  • Vendor contracts and data terms
  • Records, notices and the evidence you must be able to show

03

Verified tools in operation

Tools we have tested ourselves, introduced into your finance, HR and sales workflows.

  • Selection and legal pre-check
  • Set-up with your team
  • Review of every new feature before it goes live

04

Officer on call

A named person your team can ask, all year.

  • AI literacy training (Art. 4 AI Act)
  • Regular check-ins and regulatory watch
  • EU representative mandate for non-EU companies (Art. 22 AI Act)

Annual licence

Three levels, one 12-month term.

Essential

For companies putting their first AI tools to work.

  • AI inventory, risk map and readiness memo
  • Internal AI policy and documentation set
  • 4 advisory hours a month, quarterly review
  • 1 AI literacy session a year, monthly briefing
Enquire about Essential

Partner

For companies building AI products or high-risk systems, or selling into the EU from outside it.

  • Everything in Officer, plus:
  • EU representative mandate (Art. 22 AI Act)
  • 20 advisory hours a month, unlimited feature reviews
  • Fundamental rights impact assessment and roadmap
  • Custom training, weekly briefing
Enquire about Partner

Governance, tool implementation, training and monitoring are delivered by AI Arena. Where a matter requires formal legal advice or representation before a court or authority, it is handled by qualified counsel under a separate engagement.

The first 30 days

From first call to a named AI officer in a month.

  1. Week 0

    AI check

    30 minutes. Bring the list of tools you use. Leave knowing what is fine, what needs fixing, and what it would cost.

  2. Week 1

    Licence signed

    Mandate and documentation ready. Your team knows who to ask.

  3. Weeks 2–4

    Readiness

    Inventory, classification, policy and the first AI literacy session. Tools set up where they belong.

  4. Ongoing

    Your officer

    Check-ins, feature reviews and regulatory watch, from one team that signs, answers and stays.

Your officer

Reinforcement for your team. Not a replacement for it.

Most companies don't need another consultant who writes a report and leaves. They need someone who understands both the law and the tools, sits next to the team, and takes the paperwork off their desk so the work can move.

That is what AI Arena does. Katarina holds the legal side. Marino runs implementation and operations, so what we recommend is what we set up. We build with AI every day, and everything we deliver is made and checked by people.

Founder · Legal and governance

Katarina Bulić Bestulić

Attorney at law and EU AI governance expert. 14 years in EU law, from the European Commission in Brussels to the legal foundations of Croatia's first tech unicorn. Has spoken in New York, London, Geneva and Amsterdam.

  • EU AI Act
  • GDPR
  • AIGP · in progress
  • CIPP/E · in progress

Implementation and operations

Marino Bestulić

Sets up the tools we recommend and keeps them running inside your workflows.

AI Arena Academy

Prefer to build the skills in-house? We teach that too.

Practical programmes for teams and leaders, from first prompts to the AI literacy the AI Act requires.

For everyone

AI basics and productivity

Hands-on training with ChatGPT, Claude and the tools your team already has, for people starting from zero.

For CEOs, CFOs and legal

AI governance for leaders

How to run AI in your organisation: roles, policy, risk and vendors.

For whole teams

AI Act literacy

The Article 4 training every company using AI must provide, delivered so people actually apply it.

FAQ

Questions we get on the first call.

We already have a data protection officer. Why an AI officer?

A DPO looks after personal data. An AI officer looks after how your company uses AI: which tools, on what basis, with what documentation, and what the AI Act requires of each. The two roles work together, and we align everything we do with your privacy set-up.

Is this legal advice?

The licence covers governance, tool implementation, training and monitoring. Where a matter needs formal legal advice or representation, it is handled by qualified counsel under a separate engagement, and we tell you before that line is crossed.

We're a US or UK company selling into the EU. Does this apply to us?

Usually, yes. The AI Act applies when your AI system is placed on the EU market or its output is used in the EU, wherever you are based. Non-EU providers of high-risk AI must also appoint an EU representative. The Partner licence includes that mandate, so your buyers and regulators have one European contact.

Can we start small?

Yes. Start with the free 30-minute AI check. If your list is short and clean, we'll say so. If not, Essential covers the basics and you can move up as the work grows.

Who actually does the work?

We do. Katarina on the legal side, Marino on implementation, both using AI tools we have verified ourselves. Everything you receive is made and checked by people.

Find out in 30 minutes what your AI actually needs.

Bring the list of tools you already use. Leave knowing what is fine, what needs fixing, and what it would cost.

Book a 30-min AI check

Free, with no obligation to sign.