EU AI Act enforcement begins Aug 2, 2026

Your AI Act compliance audit in 10 days,
not 4 weeks  not $15,000.

Plumbline delivers a complete AI Act compliance audit in ten business days for $1,500 flat. Full tool inventory, jurisdiction risk classification (EU AI Act, Colorado SB 205, NYC AEDT), governance policy, consumer disclosures, and a 30-day implementation checklist.

Email to book a call See a sample ↓
EU AI Act: live Aug 2, 2026 · up to 7% of global revenue
Colorado SB 205: in effect since Feb 2026
SaaSE-commerce / ShopifyFintech (state-by-state overlay)Healthcare (HIPAA overlay)MarketplacesSeries A–C startups
10days
From kickoff to delivered audit. Law firms take 4–8 weeks.
$1,500flat
Specialty AI-compliance firms charge $15–30k. Big-Law charges $50–150k.
60–80%
Of AI tools your team uses are missed by self-report. Our scan finds them.
3jurisdictions
EU AI Act, Colorado SB 205, NYC AEDT — classified per tool, per use.
Process

Ten business days, kickoff to delivery.

A predictable engagement. We're transparent about what happens, when, and what we need from you. You'll spend about an hour total.

Engagement timeline

Your time required: ~60 min over 10 days
Day 1
Kickoff call (15 min)Confirm scope, jurisdictions, team list, access method (OAuth or manual).
15 min · you
Day 1–2
Inventory collectionEither OAuth read-only scan of Google Workspace + M365 + Slack, OR you send us the AI tool list manually — your choice.
Us
Day 2
Async team interviews dispatched4–6 team members receive a 10-minute form. Their answers fill gaps the inventory misses.
~50 min · team
Day 3–4
Inventory consolidatedSources cross-referenced. You receive a draft tool list to confirm before classification.
Us
Day 5
Jurisdiction classificationEach tool classified per EU AI Act Annex III, Colorado SB 205, NYC AEDT, applicable state laws.
Us
Day 6–7
Documentation draftingDPIA templates, governance policy, consumer disclosures, vendor verification list.
Us
Day 8
Senior reviewEvery document reviewed before delivery. Nothing ships without sign-off.
Us
Day 9
DeliveryNotion workspace + downloadable PDFs. Implementation checklist with owner assignments.
Us
Day 10
Walkthrough call (30 min)We walk you through findings, you ask anything, we adjust if needed.
30 min · you
Sample

See exactly what you'll receive.

Below is a real sample audit built for a fictional 75-person Shopify retailer. Same structure, depth, and templates a paying customer gets — only the company is invented.

plumbline.moorageco.com/sample/northwind-ecommerce
12-page sample · fictional customer · same structure as paid delivery Open full sample in new tab →
What you get

Seven artifacts that hand off cleanly to your legal counsel.

AI tool inventory

Every AI tool your team actually uses — including shadow tools nobody told leadership about.

Jurisdiction risk matrix

EU AI Act, Colorado SB 205, NYC AEDT — risk classification per tool, per use case.

Governance policy

Internal AI governance policy template, adapted to your company size and industry.

Consumer disclosures

Ready-to-deploy disclosure copy for your site, chatbots, AI-influenced decisions.

Vendor verification

Per-vendor compliance status check, outreach templates for the ones who haven't published.

30-day rollout

Day-by-day implementation checklist with owner assignments and regulator deadlines.

Walkthrough call

30-minute call to walk you through findings + 30 days of email support after delivery.

Security & data handling

We take less from you than you'd expect.

The cleanest engagement is the one that leaves no trace. Here's what we ask for, what we keep, and what you control.

Read-only access

OAuth tokens are read-only and revoked immediately on delivery. We never write, modify, or post anything in your tools.

Encryption in transit + rest

All scan results and interview responses are encrypted with AES-256 at rest and TLS 1.3 in transit.

90-day deletion

All engagement data is deleted 90 days after audit delivery. Tokens deleted within 24 hours. Earlier on request.

Never trained on

Your data is never used to train or fine-tune any model. We don't share it with vendors, partners, or third parties.

Don't want to OAuth? Skip the workspace scan entirely. Send us your AI tool list manually via spreadsheet or email — we fill the gaps via team interviews instead. Same 10 days, same deliverable, no scope changes.
Pricing comparison

A focused methodology — not billable-hour bloat.

Law firms quote hourly for general-counsel scope that includes a lot you don't need. We do one thing — AI Act audits — narrowly scoped, repeatable, fast. That's the pricing difference.

PlumblineFocused AI Act audit · 10 business days · flat fee
$1,500
$1,500
Specialty AI-compliance firmMid-market AI compliance · 4–6 weeks
$15–30k
$15k–30k
Boutique law firmHourly · 30–50 hrs · partner + associate
$25–50k
$25k–50k
Big-Law full programDLA Piper / Latham / Wilson Sonsini
$50–150k
$50k–150k

Sources: typical 2025–2026 AI-compliance engagement rates from Path Optimization, IAPP rate surveys, and published Big-Law partner billing rates ($800–$1,800/hr). The wedge isn't because anyone is overcharging — it's because their scope includes ongoing counsel, litigation readiness, and regulator interfacing that a focused audit doesn't.

Who we are

A focused operation, not a faceless brand.

Plumbline LLC operates one product: AI Act compliance audits. Same engagement, same deliverable, same flat fee — every time.

Plumbline LLC is a Delaware-registered company built around a single offer: a complete AI Act compliance audit delivered in ten business days for $1,500. We don't bundle adjacent services. We don't quote by the hour. We don't take retainers.

Our methodology is open: workspace scan or manual inventory, async team interviews, jurisdiction classification by Annex III rubric, templated documentation, senior review before delivery. Every audit follows the same process, which is why we can quote a flat fee.

When you book a call, you talk to whoever is responsible for the engagement — no support tiers, no ticket queue. Every email is answered within 24 hours.

Plumbline LLC · Delaware
Every inquiry answered within 24 hours. No ticket queue, no support tiers.
Pricing

One number. No retainer. No hourly surprise.

$1,500 flat · per company · all-in

Includes

  • Full AI tool inventory
  • Jurisdiction risk classification (EU + CO + NY)
  • Async team interviews
  • Governance policy template
  • Consumer disclosure templates
  • Vendor verification checklist
  • 30-day implementation checklist
  • 30-min walkthrough call
  • 30 days email support after delivery
  • 10 business days from kickoff

Not included

  • Implementation work (we deliver the plan; you execute)
  • Ongoing monitoring (one-time audit)
  • Legal opinion or representation (we collaborate with your counsel)
  • State certifications beyond CO + NY
  • EU member-state implementing rules (separate engagement)
  • Litigation or regulator-interfacing support
Two guarantees. (1) If our audit misses a Colorado SB 205 or EU AI Act obligation that surfaces in your first compliance review by a qualified third party, we refund the full audit fee. (2) If you flag anything in the deliverable as wrong or unclear, we redo it free until you're satisfied — no questions, no scope-creep billing.
Honest answers

Questions we'd be asking too.

Do you have other customers we can reference?
Not yet. Plumbline launched in May 2026 — you'd be among the first audits we deliver. The sample on this page is fictional and built to demonstrate the structure of a real audit. Two ways we de-risk this for you: (1) we redo anything you flag in the deliverable, free, until you're satisfied; (2) full refund if you find an obligation we missed. After delivery, we'll ask permission to use the work as a real case study — your name + the option to redact details.
My company is small. Do we actually need this?
Probably, but not always. Colorado SB 205 applies to any company making consequential decisions about Colorado residents. EU AI Act applies if you sell anything in the EU. If you're under 10 employees with no EU customers and no AI in hiring decisions, you can likely skip — we'll tell you that on the intro call.
What if my company has unusual compliance overlay (HIPAA, GLBA, state finance)?
The audit fully covers EU AI Act + Colorado SB 205 + NYC AEDT. For HIPAA, GLBA, FINRA, or state-specific financial / healthcare overlays, we'll flag the interaction points on the intro call. If the overlay adds significant scope, we'll quote a follow-on engagement — or refer you to a firm that does that specifically. We won't quietly include it and produce a half-version.
Why isn't this $300 like other audit services?
The cheap audits ($300–500) are questionnaire-only and don't inventory shadow AI usage. Self-reported surveys miss 60–80% of the AI tools actually in use. The workspace scan plus async team interviews is the only way to find them, and that's most of the value.
Are you a law firm?
No. Plumbline LLC is not a law firm and the audit is not legal advice. We work alongside your legal counsel — the deliverables are designed to be reviewable by an attorney in under an hour, much cheaper than having the attorney build the inventory from scratch.
How do we get started?
Email us to schedule a 15-minute intro call. On the call we confirm scope, jurisdictions, and team size. If we're a fit, we send an engagement letter and invoice. Payment in full starts the clock.
What happens to my data?
OAuth access is read-only, revoked within 24 hours of delivery. Interview responses and audit drafts are encrypted and deleted 90 days after engagement close (earlier on request). Your data is never shared, sold, or used to train any model. See privacy.

August 2 is on the calendar.

EU AI Act enforcement begins in weeks. Colorado SB 205 already applies. About an hour of your team's time over ten days, for $1,500, gets you ready.

Email to book a call