Skip to content
buildbyalex

AI Act · retrofit

Your bot must disclose itself. I ship that in five days.

Your chatbot or voicebot is already running, and since 2 August 2026 it has to tell people they are talking to a machine. In five working days I change the widget, the logging and the route to a human, and hand you the AI system register plus the paperwork an inspector asks for.

Book a call

from €490 (2,100 PLN net)

5.0 out of 5 · 3 reviews

sample

AI Act compliance report

  • AI disclosure on first messagechat widget, above the input fieldMissing
  • Handover to a humanbutton works, no opening hours setPartial
  • Consent and transcript logs90-day retention, server in FrankfurtOK
  • AI system registerchat, voicebot, product description generatorMissing
  • Article 4 staff briefing14 people across support and marketingMissing

Some overdue since 2 August 20267 of 12

The report covers the technical state and the paperwork; the reading of the law is signed off by your lawyer.

Where you stand

The legal memo sits in your inbox, the bot still says nothing

Law firms wrote the requirement down. Nobody touched the widget or the code afterwards.

  • The bot never says it is a bot

    Article 50 of the AI Act applies from 2 August 2026 and requires that a person is told at the first interaction they are dealing with a machine, clearly and in an accessible way. A line in your terms of service or in the footer does not cover it. The notice belongs where the conversation starts.

  • You have a memo, not a product change

    Law firms describe the duty and state outright that technical implementation is out of scope. So nobody rewrites the greeting, nobody configures consent logging, nobody documents the escalation path. The document goes into a folder and the system stays exactly as it was.

  • Nothing to show during an inspection

    In Poland the KRiBSI commission gets inspection powers on 28 October 2026 and will ask which AI systems run in the company and who owns each one. Without a register and without logs the answer is that you do not know. The regulation's upper penalty bands are up to €35M or 7% of turnover for prohibited practices and up to €15M or 3% for other breaches.

  • No documented training for the team

    Article 4 on AI literacy has applied since 2 February 2025 to every company deploying AI, including a firm that only uses ChatGPT in customer service. A one-off message in your work chat is not a programme. You need role-adapted material and proof that the session happened.

Scope

Six things I change in your system

Each one is visible either in the product itself or in a document you can hand over.

Disclosure at first contact

The AI notice goes into the opening of the conversation: in the chat widget above the input field, in the voicebot as the first sentence before any question. It stays visible after a page reload and when someone returns to the thread. You get the wording in four languages.

The route to a human

I build an explicit way out of the bot: a button in the widget, trigger phrases that force escalation, and a handover that carries the transcript into your inbox or agent chat. Outside working hours the bot collects a contact and states a real response time.

Consent and transcript logging

I set what gets stored: the consent text, the timestamp, the version of the disclosure shown, the session id. Retention period and storage location are written down, and the export for an inspection is set up in advance rather than assembled by hand.

AI system register

I list every AI system actually running: vendor, model, purpose, input data, the owner on your side, the legal basis. You get the register as a sheet your own team can keep current without me.

Marking AI-generated content

Product descriptions, blog posts and generated images get a visible label and metadata in the file. This is the specific duty that carries a 2 December 2026 deadline for systems placed on the market before 2 August 2026.

Article 4 documentation

Briefing material adapted per role: support, marketing, sales. A 60-90 minute online session, an attendance list, and a one-page internal policy on using AI. This is the piece of evidence that is missing most often.

How it runs

Five working days, no rewrite of the bot

I need access to the bot panel and the site. Everything after that is on me.

  1. Day 1

    Inventory

    I list what is genuinely running: the widget on the site, the voicebot on the phone line, the description generator, the plugins in the shop. I collect access and pin down who owns each system on your side.

  2. Day 2

    Audit, 12 checkpoints

    I work through the checklist: disclosure, placement, escalation, consent, retention, content marking, register, staff briefing. You get a report with a verdict on every checkpoint and a list of the gaps.

  3. Day 3-4

    Implementation

    I change the widget, the system prompt, the logging configuration and the escalation branch. Everything lands on staging first and moves to production once you sign it off.

  4. Day 5

    Documents

    AI system register, retention policy, briefing material and a one-page summary for your lawyer. The files stay with you in an editable format.

  5. After go-live

    Session and re-check

    I run the session for your team and leave the attendance list behind. Before 2 December 2026 I do one free re-check to see whether anything drifted after your own edits to the bot.

Packages

One bot

from€490

One chatbot or voicebot, one language, one channel. Audit and implementation fit into the same week.

  • Audit against 12 checkpoints
  • AI disclosure in the widget and the greeting
  • A handover path that actually works
  • Consent and transcript logs with retention
  • Report with verdicts and the list of gaps
  • One round of fixes after handover

A Shopify shop running a Tidio widget, a clinic with a voicebot on the phone line.

Free 30-min call

Audit, register and briefing

from€850

The full set for a company with one bot and a couple of other AI tools inside. It closes the product and the paperwork in one pass.

  • Everything in the One bot package
  • AI system register in an editable sheet
  • Marking of AI-generated content
  • Retention policy and where the data sits
  • Article 4 online session, 60-90 minutes
  • One-page summary written for a lawyer

A company with a site chat, a description generator and ChatGPT in support.

Free 30-min call

Several bots or brands

from€1,390

Up to four bots, brands or language versions, with a separate register per legal entity.

  • Up to 4 bots, brands or language versions
  • A register per company
  • Escalation configured channel by channel
  • Sessions for two teams
  • Control re-check before 2 December 2026
  • Chat access to me for 30 days

A salon chain running a bot on the website, WhatsApp and Messenger.

Free 30-min call

Prices are net and payable once you accept the report. This is engineering and documentation, not legal advice: your lawyer signs off the reading of the law, I own what actually changes in the system.

When not to hire me

Four situations where this engagement gives you nothing.

  • You need a legal opinion or a document to sign. I am not a lawyer and I do not interpret the regulation.
  • Your system is high-risk: candidate scoring, credit scoring, biometrics. Different scope and a different deadline, 2 December 2027.
  • You want a certificate or an 'AI Act compliant' badge. Nobody issues one, and faking it makes your position worse.
  • You have no bot yet. Then this is not a retrofit, it is a build.

If the chatbot is still only a plan, the right place to start is the page on Services

No call needed

Fixed estimate in 24 hours

Describe the task in two sentences. You get a fixed price, a timeline and a plan. If it isn't a fit for us, we say so straight away and point you elsewhere.

  1. 01We read the task and ask two or three questions if anything is unclear
  2. 02We put together the estimate: scope, price, launch date
  3. 03It lands in your inbox within a day. The next move is yours

No newsletters, no unsolicited calls. The answer comes by email.

How we handle your data is explained in our privacy policy.

Questions about the AI Act

  • Yes. Since 2 August 2026, Article 50 of the AI Act requires that a person interacting with an AI system is told so at the first interaction, clearly and in an accessible way. The duty sits with you as the deployer, not with the vendor of the widget. Placement matters as much as wording: the notice has to be where the conversation begins.

  • The disclosure duty already applies, from 2 August 2026. Systems placed on the market before that date have until 2 December 2026 to bring the marking of AI-generated content into line. In Poland there is a third date: 28 October 2026, when the KRiBSI commission gains the power to inspect, run proceedings and impose fines.

  • Up to €35M or 7% of worldwide turnover for prohibited practices, and up to €15M or 3% for other breaches, transparency duties included. The higher of the two figures applies. For a small company the practical risk is rarely the ceiling, it is the proceeding itself and the time it eats.

  • Komisja Rozwoju i Bezpieczeństwa Sztucznej Inteligencji, KRiBSI for short, created by the Polish act on artificial intelligence systems. The substantive part of that act entered into force on 11 August 2026, and the commission's powers to inspect, run proceedings and impose fines start on 28 October 2026. The chair is appointed in October and the commission is operational from November 2026.

  • No, the transparency duty falls on you as the deployer. In practice the Tidio, Intercom or Voiceflow panel gives enough control: I change the greeting, the widget copy, the escalation and the retention without touching vendor code. The whole job takes five working days and does not require rewriting the bot.

  • Yes. Article 4 of the AI Act on AI literacy has applied since 2 February 2025 to every organisation using AI, regardless of size or risk class. A single email or a generic handout is not enough: you need a role-adapted programme with material and evidence that the session took place. A breach falls into the band of up to €15M or 3% of turnover.

  • No. It is engineering and documentation: I change the product, configure the logs, compile the register and prepare the material for your team. The reading of the law and the final risk assessment are signed off by a lawyer, yours or one I can point you to. The one-page summary is written so a lawyer can review it in fifteen minutes.

Read first

Background, before you get in touch

Google reviews

5.0

5.0 out of 5 · 3 reviews

Write a review on GoogleAll reviews on Google
  • We received a request to develop an online store that included an AI-powered chatbot and Stripe payment integration. Everything was delivered on time, and we’re continuing to work together. I highly recommend them.
    Volodymyr Likholetovin the last week · Google
  • An excellent developer and a true professional. The work was completed strictly on time, communication was pleasant, everything was done quickly and to the point. I highly recommend him to anyone looking for a reliable, competent specialist.
    Alina Rudenkoin the last week · Google
  • A great programmer. He created an online store quickly and on time.
    Алексa week ago · Google
Let's build it · Open for new projects

Free 30-minute call. No sales pitch - just a real conversation about what you need and whether we're the right studio to build it.

  1. 30 mindiscovery call
  2. 24 hoursfixed estimate
  3. 0hidden invoices
Book a callinfo@buildbyalex.com
5.0 · 3 reviews

No sales pitch - just a clear read on your scope.

WhatsAppLet's talk