AI Act Made Simple

Legal, privacy and AI Act compliance

Terms of service, privacy and cookie policy, AI Act compliance statement and a glossary of the terms used across them. One page, four sections, no cross-references you have to hunt for.

Last updated: August 9th, 2026

• Terms of service
• Privacy and cookie policy
• AI Act compliance
• Glossary

Terms of service

These terms govern access to and use of the AAMS website, tools and services, together the Services. By using the Services you accept these terms.

Agreement and services

We provide AI Act compliance tools and assisted legal services across the routes published on the pricing page: the free RRCS assessment, the Biz assessment and Pro bespoke work. We may update features while maintaining core functionality.

Eligibility and accounts

You must be at least 18 years of age and able to form a legally binding contract in your jurisdiction. You are responsible for your account credentials and for activity carried out through your account.

Scope and deliverables

• Free RRCS assessment: an indicative check based on the answers you give. It is not legal advice.
• Biz assessment: a standardised legal assessment of the material you provide, with obligations mapping. Implementation remains yours.
• Pro: bespoke audit, documentation and rollout as agreed in an order.

Where this page and a signed order conflict, the order prevails.

Fees, taxes and refunds

Fees are as quoted. Taxes are your responsibility. Except where the law requires otherwise, fees are non-refundable.

Acceptable use

No unlawful content, reverse engineering, large-scale scraping, security testing without consent, or misuse of automated output.

No legal advice and no attorney-client relationship

Outputs produced by the platform are guidance, not legal advice, and using the platform does not create an attorney-client relationship. A formal engagement letter is required for legal services.

Client materials and confidentiality

You grant us a limited licence to process the materials you submit for the purpose of delivering the Services. We keep non-public information confidential, subject to our legal duties.

Privacy

Use of personal data is described in the privacy and cookie policy below.

Intellectual property

The Services, the documentation and the brand are our intellectual property. You own your inputs and you receive a licence to use deliverables as specified in your order.

Warranties and disclaimers

The Services are provided as is and as available. To the maximum extent permitted by law we disclaim all implied warranties.

Limitation of liability

We exclude indirect and consequential damages. Our aggregate liability is capped at the fees paid in the twelve months before the claim, or at 100 euro for users of the free tier.

Indemnity

You will indemnify us for losses arising from your breach of these terms or from unlawful use of the Services.

Termination

We may suspend or terminate for cause or risk. You may stop using the Services at any time. Clauses that by their nature should survive termination will do so.

Governing law and venue

These terms are governed by the laws of Italy. Exclusive venue is the courts of Rome, Italy.

Changes to these terms

We may update these terms. Material changes will be notified, and continued use constitutes acceptance.

Contact

AAMS Legal Services, Cattarini Maier Law Firm, Via Fabio Severo 38, Italy.
Email: legal@aiactmadesimple.eu

Privacy and cookie policy

This notice explains how we process personal data under the GDPR and the UK GDPR.

Data controller

AAMS Legal Services, Cattarini Maier Law Firm, Via Fabio Severo 38, Italy.
Privacy contact: privacy@aiactmadesimple.eu

What we collect

Account and contact data, usage data, the content you submit through the assessment or an engagement, and support communications. We do not store payment card data on this website.

Purposes and legal bases

• Providing and securing the Services: performance of a contract and legitimate interest.
• Improving features and understanding usage: legitimate interest, and consent where required.
• Service and product communications: consent or soft opt-in.
• Meeting legal obligations such as record keeping and lawful requests.

Legally required acceptance is recorded separately from optional marketing consent, and you can withdraw the latter at any time.

Retention

We keep data only as long as necessary for the stated purposes or as required by law, then delete or anonymise it. Deleting your user profile deletes the associated data by default. For any other deletion, you need only ask.

Sharing and processors

We use vetted processors for hosting, email and site operation under data processing agreements with appropriate safeguards. We do not sell personal data.

International transfers

Transfers outside the EEA and the UK rely on adequacy decisions or on standard contractual clauses with supplementary measures.

Your rights

You may exercise your rights of access, rectification, erasure, restriction, portability and objection, and you may withdraw consent at any time. Write to privacy@aiactmadesimple.eu.

Security

We apply organisational and technical measures, including encryption in transit and access controls.

Children

The Services are not directed to people under 18, or the local equivalent age.

Cookies and similar technologies

• Strictly necessary: site operation, security and keeping you signed in. These are always active.
• Preferences: settings you choose, such as dismissing a notice.
• Analytics: used only where consent has been given.
• Marketing: used only where consent has been given.

To ask which cookies are currently set, or to change your choices, write to privacy@aiactmadesimple.eu.

Supervisory authority

Garante per la protezione dei dati personali, the Italian data protection authority.

AI Act compliance

This statement describes how AAMS approaches the EU AI Act, both as the operator of an AI-assisted platform and as a legal adviser to organisations subject to the regulation.

Scope and roles

For our own platform we act as the provider of an information system that is not a high-risk AI system. Content generated with AI assistance is labelled as such, and you will never interact with a user-facing AI system without being told. In client engagements we provide AI-assisted advisory work. Clients remain the provider, deployer, importer or distributor of their own systems.

Risk management and oversight

We maintain a documented risk process with human review of material outputs, accuracy checks appropriate to purpose, logging and change control.

Transparency to users

Where an interaction involves AI assistance we label it and explain in plain language what it can and cannot do. No legal advice is ever issued on the basis of AI-generated content alone.

Data governance

We apply data quality checks, access controls, data minimisation and retention aligned with the privacy policy above.

Post-market monitoring and incidents

We collect feedback, track issues and provide a channel for serious incident reports at compliance@aiactmadesimple.eu.

Prohibited practices

We do not support practices prohibited by the AI Act, including social scoring and manipulative techniques as defined by the regulation.

High-risk engagements

Where we help a client design or document a high-risk system we deliver gap analyses, evidence packs and conformity guidance. The client remains responsible for the final conformity assessment and CE marking.

Glossary

Key legal and compliance terms used across the sections above.

Terms of service

The contractual rules governing how you may access and use the AAMS website and services. Binding on acceptance when you use the platform.

Privacy policy

A statement explaining how AAMS collects, uses, stores and protects personal data, in compliance with the EU GDPR and the UK GDPR.

Cookie policy

Information on the cookies and similar technologies used on the website, their purpose, and how choices are managed.

AI Act compliance

Our internal and client-facing measures aligned with Regulation (EU) 2024/1689, the AI Act, as subsequently amended, covering transparency, accountability and human oversight in AI-assisted services.

Confidentiality

The duty to protect non-public information shared with us. We restrict disclosure except where the law requires it or the client expressly authorises it.

Intellectual property

Legal rights over our brand, platform and documentation. You retain ownership of your inputs, and AAMS grants you rights to use deliverables as specified in your order.

Provider

Under the AI Act, the entity that develops an AI system or a general purpose AI model with the intention of placing it on the EU market under its own name or trademark.

Deployer

Any natural or legal person using an AI system under its own authority in a professional capacity. Obligations vary with the risk level and the purpose of the system.

Authorised representative

A person or company established in the EU, mandated by a non-EU provider to carry out compliance tasks under the AI Act.

Fundamental rights impact assessment

An assessment required for certain high-risk AI systems, analysing effects on rights such as privacy, non-discrimination and due process.