Sample scenario — fictional. Based on patterns we see in mid-market SaaS conversations.
A 120-person B2B SaaS company shipping AI features
From "we have six policies in three docs" to a defensible Article 4 readiness PDF in roughly six weeks.
Asiakasprofiili
- Toimiala
- B2B SaaS — workflow automation for legal teams
- Koko
- 120 employees, ~25 in engineering, ~15 in product
- Maantiede
- HQ Tallinn, Estonia. Customers across the EU and UK.
- AI-kypsyys
- Ships AI summarisation features (powered by a third-party LLM API). Internal adoption of AI tools across go-to-market and engineering. No formal governance pre-AIRegistra.
- Sääntelykonteksti
- GDPR exposure as a processor for EU customers. EU AI Act exposure as both Provider (AI features) and Deployer (internal AI tool usage).
Ongelma
Procurement requests from EU customers asking for the AI usage policy started arriving in early 2026. The team had three different policies in two different documents owned by no one. Internal tool usage was untracked — finance discovered the AI line item had doubled across two quarters with no explanation. The team had committed to producing a defensible AI Act readiness response by the end of Q2 2026 with no clear path.
Ratkaisu
Adopted AIRegistra in week 1. Imported the last 90 days of billing CSVs across week 1–2 — surfaced 18 AI tools, of which 6 were unknown to the compliance owner. Declared both Provider (their own AI features) and Deployer (internal tools) roles in week 2. Worked the EU AI Act readiness checklist across weeks 3–5, attaching evidence as it was created. Ran the first Article 4 training session in week 4, recorded attendance, attached as evidence. Generated the first snapshot PDF in week 6.
Lopputulos
Procurement responses now point to the snapshot PDF and the live readiness state. Time-to-respond on AI-related questionnaires dropped from "we will get back to you in 5 days" to a same-day response with an attached PDF. Finance gained visibility into AI spend per team and per category for the first time. The compliance owner moved from "I have no idea what we have" to "I can defend this in an audit" within two months.
"Honestly the biggest thing was just having one place to point at when a customer asked. The PDF is real evidence; before we had vibes."
— Compliance owner — name redacted while company is finalising public reference.