Compliance check

Which obligation applies, and which evidence is missing next?

We narrow down applicability, review the available evidence and give leadership a prioritized action plan.

Discuss where to start

Thirty minutes. Bring your starting point and the most important open decision. You will receive a clear assessment of whether this entry point fits.

Starting point

When a compliance check is useful

Around 29,500 entities in the German NIS2 scopeGerman Federal Office for Information Security · Last reviewed 25/07/2026After the German implementation act entered into force, the BSI cited around 29,500 regulated entities. Actual applicability depends on sector, size and activity.Open primary source

EU AI Act deadlines have been phased since July 2026EUR-Lex, Regulation (EU) 2026/1744 · Reviewed 26 July 2026Article 50 transparency obligations apply from 2 August 2026. The amended high-risk deadlines begin on 2 December 2027 for Annex III systems and on 2 August 2028 for systems embedded in regulated products.Open primary source

  • Several regulations are discussed while concrete applicability remains open.
  • Policies exist, but ownership and evidence do not yet fit together.
  • A customer, insurer or auditor asks for reliable documentation.
  • AI systems are in use without documented approval and ongoing control.

First paid step

Compliance check

The check gives leadership a documented list of priorities and owners. Certification, legal opinions and implementation of every evidence item are separate services.

2 days

from EUR 3,500 net

Base package for one legal entity, one prioritized regulation, up to four interviews and up to 15 agreed evidence items.

You receive

  • Documented assessment of assumed applicability
  • Review of existing roles, policies and evidence
  • Prioritized gaps with owners and sequence
  • Limited next implementation step
  • Results meeting and decision document

All prices are net of VAT. Preparation, delivery, results documentation and the results meeting are included in the stated base scope. Travel and accommodation costs are disclosed before commissioning. If agreed items are missing at handover, Convios completes them within ten working days at no extra fee, provided your data, interviews and decisions were available on time.

Turn regulatory requirements into a prioritized work plan

  1. 01

    Narrow down applicability

    We document the legal entity, sector, activity, systems and regulation covered by the check.

  2. 02

    Review evidence

    Existing policies, roles and technical evidence are mapped against the agreed review frame.

  3. 03

    Prioritize gaps

    The results document names the sequence, owners and smallest useful implementation step.

What we need from you

  • An accountable member of the leadership team
  • Access to the agreed policies, roles and evidence
  • Contacts in IT, information security or privacy
  • Transparent information about entities, activities and systems in scope

What the base scope deliberately excludes

  • Legal advice or binding authority guidance
  • Certification and formal audit
  • Implementation of every identified measure
  • Multiple entities or regulations without an extended scope

This fits in these cases

  • Applicability or evidence status needs a decision
  • Documents and accountable people are available
  • You want a limited next implementation step

This is not the right step yet in these cases

  • You need legal representation in an individual case
  • Certification or an audit opinion is the expected deliverable
  • Relevant documents cannot be accessed

Self-assessment

Narrow down applicability first

The quick check structures initial questions. It is not a legal opinion and does not replace the documented review.

REGULATORY CHECK

Which obligations apply to you?

As of July 25, 2026 (Digital Omnibus timelines included). Sources: European Commission (AI Act), BSIG 2025 (NIS2), CRA. Not legal advice.

Does your company use AI?

Regulatory check by Convios. Current status, not legal advice.

Afterwards

What may follow the check

A prioritized governance element or evidence item can be implemented in a separate fixed-price scope. Multiple regulations are planned separately.

Review all three stages

Questions before you start

Is the check legal advice?

No. We structure applicability, governance and evidence work. We refer individual legal questions to licensed counsel.

Are we compliant after two days?

The check documents status, gaps and the next step. Implementation and effectiveness review follow separately.

Can several regulations be reviewed?

Yes, with an extended scope agreed in advance. The base package covers one prioritized regulation.

Which applicability question or evidence item is open?

We narrow down the question and determine whether the two-day check is sufficient.

Discuss where to start

Thirty minutes. Bring your starting point and the most important open decision. You will receive a clear assessment of whether this entry point fits.

The call is exploratory. If there is a fit, you receive a written proposal with the agreed work, fixed fee and sign-off criteria before you decide.