Prove the work — for every client, the same way.
Deliver recurring AI Act evidence without building the evidence infrastructure yourself.
One intake, the same rule pack, one signed pack per client — so the advice you gave in March is reproducible in November, and the questionnaire a client forwards has an answer that is not "trust us".
You ship AI on dozens of client sites. Each one is a separate Article 50 question — and you are the one asked to answer it.
Every client is a separate audit
A regulator's complaint or a client's enterprise buyer can ask for proof that a chatbot says it is AI and that generated images are marked. Screenshots in a shared folder do not survive that question.
Proof goes stale every release
Redesign a site, swap a model, change a prompt — and last month's evidence no longer describes what is live. Keeping it current by hand, across a whole client book, does not scale.
The questionnaire line
The vendor questionnaire now has an "EU AI Act evidence?" line. Answering it credibly, per client, on demand, is either a billable headache or a lost deal.
A client roster, not a spreadsheet
Every client's systems in one place, each with its own derived class, its own coverage and its own signed documents.
The roll-up
See at a glance which clients have gaps, which have evidence that has gone stale, and which are ready to answer.
Per-client packs
Each of a client's systems gets its own Article 50 evidence pack — signed, verifiable by the client or their auditor without an account.
Your own exposure
Reproducibility is your defence. The same rules, versioned and cited, applied identically to every client — nothing bespoke to explain later.
Nothing to install on client sites, and nothing of ours in the critical path.
One Clause50 workspace. A recurring service for every client.
Manage each client’s AI systems in a separate, sealed organisation, keep their evidence current, and hand each one its own signed pack — under your own client relationship.
Add a client
Create a separate client organisation and record its AI systems. Its evidence never mixes with another client’s.
Keep the evidence current
Upload, connect read-only sources or attest against the checklist. Record each release as a change to the system: it is re-scored, and anything newly stale or missing shows in the roll-up.
Generate the signed pack
Each client’s Article 50 evidence pack — or its Annex IV technical file — Ed25519-signed and verifiable by them or their auditor without an account, under your own branding on Growth and above.
Deliver it as your service
Use the pack in your monthly governance, compliance or AI-assurance offering. The client relationship, the advice and the remediation stay yours.
- Delivered as your service
- Delivered as your service
- Delivered as your service
- Delivered as your service
One subscription. Multiple client organisations. Your client relationship stays yours.
Clause50 provides the evidence infrastructure. You decide how to package and price the service you deliver. Client organisations are included from Boutique.
One login switches between clients. Each member of your agency sees either every client or only the clients you name — chosen per person, changed at any time. See the agency tiers →
Your client commissions the work. If you decide how AI is used in it, the label is your duty.
The Commission’s Article 50 Guidelines give this exact case: a company that merely commissions an agency, without deciding whether and how the agency uses AI, is not the deployer. When those decisions are yours, the duty to label a deep fake — or AI-written text published on a matter of public interest — is treated as yours, not your client’s. Where the client directs how AI is used, the client stays the deployer, even when your team runs the tool.
Record each system in the organisation that owes the duty: your own agency organisation when the decisions are yours, the client’s when they are the client’s. The signed pack carries that organisation’s name.
Most agency clients owe Article 50 today. The high-risk technical file is one intake away when a client’s system turns out to be high-risk.
The quality management system, the conformity assessment, EU database registration and the fundamental rights impact assessment stay yours, whichever tool you use. See the full list.