EU AI Act · Article 50 · GDPR

Does your AI product
meet Article 50?

Chatbots and assistants · Voice agents and AI receptionists · AI agents · AI‑generated images, audio and video · Apps built on Lovable, Bolt or Replit

EU AI Act Article 50 has applied since 2 August 2026. It covers AI that talks to people and AI that generates content, and generators already on the market must mark their output by 2 December 2026. Get an honest, plain-English read on your exposure.

Find your product type Free 60-second self-check
Built by a compliance specialist with a background in law (four years in-house) who also reads the code.

// recent audit Censory, an AI redaction tool, rewrote its privacy documents within two days of my audit.

// Why this matters now

Article 50 has applied
since 2 August 2026.

The EU AI Act isn't coming — it's here, and the fines are real.

€15M

Maximum fine for Article 50 transparency violations — or 3% of global annual turnover, whichever is higher (Art. 99(4)). For SMEs, start-ups and small mid-caps, the lower of the two applies (Art. 99(6) and 99(6a)).

EU

Non-EU founders included. If your product has EU users, Article 50 applies to you — regardless of where your company is incorporated.

2 Dec

The marking deadline. AI systems that generate audio, images, video or text and were on the market before 2 August 2026 must comply with Article 50(2) by 2 December 2026 (Regulation (EU) 2026/1744). The Commission approved its Article 50 guidelines on 20 July 2026. Enforcement runs through national market surveillance authorities (Art. 74).

Check my exposure: free, 60 seconds // no sign-up · no email required

// The [Logium] difference

Most compliance help reads the law
or the code. I read both.

A scanner reads the code without the law. A legal memo reads the law without the code. I audit your live product the way a regulator would — in text and in code.

The wording

  • Article 50 transparency requirements — word by word
  • GDPR DPA obligations for LLM providers
  • Disclosure copy that is clear and distinguishable, as Article 50(5) requires
  • Disclosure timing — when users must be notified, not just somewhere in the ToS
</>

The code

  • Live product audit — not a questionnaire, not a template
  • System prompt inspection for missing AI identity declarations
  • API integration check — is your LLM provider's DPA actually signed?
  • GDPR data-flow mapping through your actual stack

// Is this you?

You're exposed if…

  • Your chatbot talks to EU users but never clearly identifies itself as AI at the start of the conversation.

  • You're using an LLM provider (OpenAI, Anthropic, Google…) but no Data Processing Agreement has been signed.

  • You're a US or non-EU founder who assumed EU law doesn't apply — it does, the moment you have EU users.

  • You're not sure what Article 50 actually requires and you've been waiting for "more clarity" before acting.

// After a [Logium] audit

  • You know exactly which Article 50 obligations apply to your product
  • You have a plain-English fix roadmap (Now / Next / Later)
  • Your disclosure wording is regulator-grade, not boilerplate
  • Your DPA situation is documented and actionable
  • You can answer a regulator's questions with confidence

// The process

From "am I exposed?"
to "it's fixed" — in three steps.

01

Free 60-sec self-check

Answer 8 plain-English questions about your product. Get an instant traffic-light read on your Article 50 exposure — no sign-up, no email.

free · instant
02

Expert audit on your live product

I review your live product: system prompts, UX copy, disclosures and DPA setup, through Upwork, which holds your payment in escrow while I work.

from $200
03

Prioritized fix roadmap

A plain-English report with every gap, the exact fix, and a Now / Next / Later priority order. No legal fog.

actionable · no fog

// What are you shipping?

One law, five kinds of product.

Article 50 of the EU AI Act sets transparency duties for AI that talks to people and AI that generates content. Pick what you ship; each card goes to the matching fixed-price service on Upwork.

Article 50(1)

Chatbots and AI assistants

People must be told they are interacting with an AI, at the latest at the first interaction, unless it is obvious.

Start with the $200 verdict

Written verdict on Upwork → Free 60-second self-check

Article 50(1) + 50(2)

Voice agents and AI receptionists

Two duties can meet on one call: the caller must know they are speaking to an AI, and synthetic audio must be marked as AI‑generated by the provider of the system that generates it. Which one is yours depends on what you built.

Caller disclosure audit · from $200 → Audio marking audit · from $200 →

Article 50(1)

AI agents

An agent that talks to people, in chat, by e‑mail or on the phone, must make clear that it is an AI.

From $200

Audit on Upwork → Free agent check

Article 50(2)

AI-generated images, audio and video

If your system generates synthetic images, audio or video, the outputs must be marked in a machine-readable format and be detectable as AI‑generated.

From $200

Marking audit on Upwork →

Article 50

Apps built on Lovable, Bolt or Replit

The AI features inside an app you built yourself, such as a support chat or generated content, fall under the same rules.

From $200

Audit on Upwork →

// Audit packages

Pick the depth of review you need.

These three packages are for chatbots and AI assistants. Other products have their own fixed-price listings, linked from the cards above.

// not sure yet? start here

The written verdict · $200

One product, seven questions by email, no calls. Three working days after your answers, you get a written verdict on which Article 50 duties apply and what follows if they do.

Get the verdict on Upwork → See a sample verdict

// flash-check

Flash Check

3-day turnaround

$300 one-time
  • Traffic-light Article 50 diagnostic on your live product
  • Top 3 critical gaps — what to fix first
  • Plain-English summary (no legal jargon)
  • Delivered as a structured PDF report
Get Flash Check →
Recommended

// full-audit

Full Audit

7-day turnaround

$700 one-time
  • Full Article 50 + GDPR audit on your live product
  • System prompt inspection + UX copy review
  • DPA status check for your LLM provider(s)
  • Prioritized fix roadmap: Now / Next / Later
  • Regulator-grade disclosure wording — ready to paste
  • One free revision round if something is out of scope
Get Full Audit →

// compliance-pack

Article 50 Compliance Pack

14-day turnaround

$2,500 one-time
  • Everything in Full Audit, plus
  • Rewritten disclosure copy (production-ready)
  • GDPR policy language tailored to your stack
  • DPA checklist + a ready-to-adopt DPA for your LLM provider
  • Fix-ready code comments and UX change specs
  • 30-day async Q&A after delivery
Get Article 50 Compliance Pack →

Runs through Upwork — escrow-protected. Upwork holds your payment in escrow while I work. Fixed price, agreed before anything starts, so you know the number up front.

// Who does the audit

The person reading your code
and your compliance — same desk.

Andrei Brisc, founder of Logium // andrei.brisc

Andrei Brisc

// EU AI Act & GDPR Compliance · Legal background

I spent four years as in-house legal counsel for a public authority in the EU, on EU-funded projects and public procurement. That is where I learned to read a regulation the way the people enforcing it do: word by word, condition by condition.

Then I crossed to the other side and learned to build AI systems. Today I audit chatbots and AI products the way a regulator would: reading the disclosure wording and the system prompt, checking the UX flow and the DPA status. Both sides, same audit.

Every audit I deliver is written by me — not a template, not a junior sub-contractor. You get one person who is accountable for every finding.

Legal background EU AI Act GDPR </> Builds AI systems Reads the code LLM integrations
Honest disclosure: I am not a bar-admitted attorney. Logium's audits are a compliance instrument — a structured expert review of your product against specific regulatory requirements. They are not legal representation and should not be used as a substitute for legal advice on contested matters. For high-stakes litigation or formal regulatory proceedings, engage a licensed EU attorney.

// Proof

Read what you get before you pay for it.

One real result, named with the client's permission, and one full sample verdict you can read end to end.

// real audit · named with permission

Censory

Censory, an AI redaction tool, rewrote its privacy documents within two days of my audit.

Visit censory.app →

// sample verdict · Article 50(1), 50(2), 50(4)

The full verdict, start to finish

Every duty checked against the stated facts, the legal text quoted word for word, and a closing section on what the company is not required to do.

Read the sample verdict →
Get your own verdict · $200

// Common questions

Questions founders ask before they book.

No — that's my one boundary. I don't give legal advice or represent you in disputes; that's a licensed attorney's job. What I deliver is the practical side: a clear compliance assessment of your product against specific EU requirements, plus ready-to-adopt documents your team or DPO reviews before official use. For contested proceedings or litigation, engage a licensed EU attorney — for a practical compliance read, that's exactly what this is.
If your chatbot or AI assistant interacts with EU users — including via a web app, SaaS product, or customer-facing interface — Article 50 almost certainly applies. The regulation covers AI systems that interact with natural persons, not just those deployed by EU companies. Run the free self-check to get a quick read on your specific situation.
With the written verdict. One product, seven questions by email, no calls. Three working days after your answers, you get a written verdict on which Article 50 duties apply and what follows if they do. $200, through Upwork escrow. Read a sample verdict first if you want to see exactly what lands in your inbox.
Honestly — yes. Nothing in Article 50 requires you to hire anyone. So what are you paying for? Three things: speed (done this week, off your plate), a correct implementation (including the machine-readable content marking the visible notice does not cover), and a documented record you can show if a regulator ever asks. It's the same work you'd do — done right the first time, by someone who reads both the law and the code.
Good instinct — but a visible line is only part of it. If your product generates content, Article 50(2) also expects the output to be marked in a machine-readable format, and Article 50(5) asks for the information to be clear and distinguishable at the latest at the first interaction. A friendly "powered by AI" badge alone usually leaves gaps. The free self-check shows you which ones.
A written verdict you can show an investor, a client or your board, not a checklist you fill in yourself. Every finding quotes the legal text it rests on, word for word, so you can verify each point. The whole review is done by a compliance specialist with a background in law (four years in-house) who also reads the code. So you learn whether your product does what its disclosure says, not only whether the wording looks right.
Flash Check: 3 business days from when you share access. Full Audit: 7 business days. Article 50 Compliance Pack: 14 business days. All timelines start after the Upwork milestone is funded and I have access to the product (live URL + system prompt, at minimum).
Upwork holds your payment in escrow while I work, and the fixed price is agreed before anything starts. It also gives you a transparent contract record, which some legal and compliance teams appreciate.
If I miss something that was clearly within the agreed scope, I revise at no extra charge. Full Audit includes one free revision round. Article 50 Compliance Pack includes 30 days of async Q&A post-delivery. I'm accountable for what I find — and for what I should have found.
Yes, when the engagement involves access to personal data (e.g., reviewing a live product with real user data). I'll flag this at the scoping stage and we'll sort it before any access is granted. For most Flash Check audits, I work only with your system prompt and public-facing UX — no personal data involved.

Know where you stand
before 2 December.

The self-check takes 60 seconds. It is free, requires no sign-up, and shows you where you stand. If you're exposed, you'll know what to fix — and in what order.

Run the free 60-second self-check