Your EU Authorised Representative under the EU AI Act.

Article 22 covers non-EU providers of high-risk AI systems under either Article 6(1) / Annex I or Article 6(2) / Annex III, once the relevant Chapter III application date is reached. Article 54 covers non-EU providers of general-purpose AI models and has applied since 2 August 2025. The two regimes can apply concurrently in a broader product stack.

Legally yes, but only if the subsidiary's independence is credible, it has the operational capacity to fulfil regulatory obligations, and the mandate is formally documented. The Authorised Representative must terminate the mandate where the provider breaches its obligations under the Act — a duty that structurally dependent entities frequently cannot exercise. For most providers, an independent representative is the safer and more credible choice.

The Act requires the Authorised Representative to terminate where the provider acts contrary to its obligations and to inform the relevant authority. We address this in the mandate itself: clear escalation procedure, written notice, transition period, and assistance in identifying a successor representative. The duty exists by law; our role is to make the worst case orderly, not adversarial.

Regulation (EU) 2026/1744 entered into force on 27 July 2026 and amended Article 113. Chapter III, Sections 1, 2 and 3 apply from 2 December 2027 for Article 6(2) / Annex III high-risk systems and from 2 August 2028 for Article 6(1) / Annex I high-risk systems. Article 54 GPAI obligations have applied since 2 August 2025; GPAI models placed on the market before that date have the Article 111(3) transition until 2 August 2027.

Yes. Regulation (EU) 2026/1744 moved the application of Chapter III, Sections 1, 2 and 3, which includes Article 22. The Article 22 appointment obligation therefore applies from 2 December 2027 for Article 6(2) / Annex III systems and from 2 August 2028 for Article 6(1) / Annex I systems. Providers may appoint and prepare earlier, but SecureFound does not present the former 2 August 2026 date as the current Article 22 application deadline.

No. The Authorised Representative is the regulatory contact point under Articles 22 and 54. It is a critical statutory role — but it is not a substitute for your internal AI governance, your conformity assessment, your risk management system, or your post-market monitoring plan. SecureFound can map the full picture for you through our partnership with Lexara Advisory.

Across the entire European Union — all 27 Member States. Article 22 of Regulation (EU) 2024/1689 requires the appointment of "an authorised representative which is established in the Union", not one per Member State. A single Authorised Representative, established in any EU Member State, covers the whole Union market. This mirrors the long-established Article 27 GDPR regime in force since 2018. SecureFound is established in Spain — placing AESIA (the Spanish Agency for the Supervision of Artificial Intelligence) as our coordinating "home" authority — but we represent providers before any national market surveillance authority across the Union, and before the EU AI Office in Brussels.

They contact SecureFound. As your sole Authorised Representative in the Union, we are the addressable contact point for every national market surveillance authority across the 27 Member States — and there are approximately 2,000 of them under the AI Act. We receive their communications, coordinate the response with you, produce the required documentation, and engage with the authority directly or through AESIA depending on the procedure involved. You appoint one representative; you cover one Union.