Acerete Abogados
Book a consultation
01

AI compliance

Using AI in your business without taking chances: what the EU AI Act requires of you, what you must document and where your liability ends.

Book a consultation WhatsApp
How I help
Assessment: what AI you use and at what risk level
EU AI Act: what applies to you, and when
Provider or deployer? The duties of each role
Data protection in AI tools
Internal use policy and team training
Contracts with AI vendors and allocation of liability
Human oversight and traceability of decisions
AESIA and the penalty regime: what you are exposed to

When it makes sense to call me

If any of these sound familiar, let’s talk
01

Your team already uses AI daily and nobody has written down yet what can and cannot be uploaded.

02

You sell or integrate an AI product and a client is asking for compliance guarantees.

03

You automate decisions that affect people: CVs, pricing, scoring, customer service.

How we work

01

You tell me about your case

Video call, phone or in person across València province. No commitment, no legalese.

02

I tell you your options

With the timeline, cost and risk of each route. In plain words, in writing if you prefer.

03

We see it through

You always deal with me, never with an intern. I flag every step before taking it.

Frequently asked questions

Does the AI Act apply to me if we only use ChatGPT at work?+

Yes, though with far lighter duties than those of whoever builds the system. As a deploying company your job is mainly to know which tools you use, with what data, who reviews the output, and to train your team. That is solved with an internal use policy and a couple of sessions, not a months-long project.

What is the difference between provider and deployer?+

A provider builds the system or puts it on the market under its own brand; a deployer applies it in its own activity. The provider carries the technical documentation and conformity assessment; the deployer carries human oversight, the input data and control over what the system does. Plenty of startups are both at once without realising, and that is exactly where it pays to look closely.

How long does a basic review take?+

An initial assessment — tool inventory, risk classification and a list of duties — usually takes a couple of weeks. From there you decide what you implement yourself and what you would rather I draft.

What if I receive a formal request?+

You answer it with documentation, not improvisation. The sooner you have your systems register, internal policy and documented training, the stronger your position: prior diligence is what weighs most when a penalty is set.

Other areas of expertise
Inheritance & estates Real estate Contracts Debt & damages claims Supported decision-making
Guides on this topic
The EU AI Act: What You Must Do, and By When

Tell me about your case and I’ll tell you where to start

We talk with no commitment and no legalese, by video call or across València province.

Book a consultation +34 674 328 073

Losing someone is hard enough. My job is to keep the paperwork and the difficult decisions from becoming a second loss.

Miriam Acerete — ICAV member no. 20213