Case Studies

MEOK AI Labs (self-test)

The challenge

We sell signed compliance attestations to other companies. Auditors and procurement reviewers ask the obvious question: does MEOK pass its own EU AI Act audit? We needed a published self-test with the same evidence quality we deliver to customers.

What we did

Ran the full /scorecard against MEOK's own AI surface. Generated DPIAs against the EDPB harmonised template (14 April 2026). Wired the meok-attestation-api as the signing layer for our own evidence. Cross-mapped every Article 4-72 obligation to a specific MCP package.

Outcome

Signed attestation MEOK-EUAIAC-MAIN, publicly verifiable via meok-attestation-api.vercel.app/verify. ~83% readiness score. Two open gaps documented honestly: (1) external auditor sign-off pending Q2 2026, (2) ISO/IEC 42001 external audit pending Q3 2026. Trust page lives at meok.ai/trust.

Anonymised — German Mittelstand SaaS

The challenge

Missed the 6 March 2026 BSI register deadline. CTO + IT Lead had the Elster cert blocker plus German UI navigation — three failed attempts at self-filing over four weeks. Procurement was about to disqualify them from a pending €240K contract that required NIS2 evidence.

What we did

Bought MEOK's £999 NIS2-DE Done-For-You. 60-min Zoom kickoff to gather entity details. We completed Section 32 register on their behalf, drafted late-filing rationale referencing the BSI's grace-period guidance, generated signed attestation MEOK-NIS2-XXXXX with public verify URL, included 30 days of email support for BSI follow-ups.

Outcome

Filed within 7 days of order. Procurement cleared the contract. Customer renewed for a 12-month £999 monitoring extension at year-end (ICT third-party assessment + ongoing register updates).