EU Market Entry · For non-EU software, AI & fintech

Enter the EU with the legal architecture already standing.

One counsel, three fixed-fee packs — entity & representation strategy, the 2026 product-liability regime for software and AI, and DORA supplier terms — run from Bucharest, inside the Union.

Before we act

The full engagement is available only after client identification and anti-money-laundering checks (KYC/AML) and a direct conversation with counsel. Nothing is drafted, signed or filed before a written, fixed-fee scope is agreed. Everything on this page is general information about our services and the EU legal landscape — not legal advice, and not an offer of representation.

New · EU deadline 9 Dec 2026

Placing regulated products on the EU market? Read the AI Act × PLD recast impact analysis.

Product-category risk profiles, the three converging regimes, a five-stage methodology and indicative pricing.

Three fixed-fee packs

Scoped in writing before we start, in EUR. Pick the one that meets your next deadline.

01

Architecture

EU Entry Architecture

Your product, mirrored in law.

Entity and representation strategy — GDPR Article 27, AI Act authorised representative, the product-liability operator chain — the contract stack (terms of service, DPA, reseller and importer agreements), and the operational spine to run it.

Architecture map + contract pack · fixed fee

02

Product rules

Product Liability & AI Readiness

The 2026 liability wall, mapped before you hit it.

From 9 December 2026, software and AI placed on the EU market answer under strict product liability — presumptions of defect, court-ordered disclosure, 10-to-25-year tails. Exposure map, documentation and disclosure readiness, insurance-gap specification.

Scored readiness report + priority redlines · fixed fee

Read the briefing
03

Financial sector

DORA Supplier Pack

Selling to EU banks and insurers.

DORA has applied since January 2025, and its contractual requirements reach non-EU ICT vendors through every EU financial client. We review the addendum from your side — required versus over-reach versus abusive — with an Article 30 mapping and a pin-cited negotiation memo.

Deviation memo + redline · fixed fee

Read the briefing

EU Legislative Radar

A calendar-based regulatory watch calibrated to your product and sector — what lands, when, and what it changes for you. Below, a still extract; the live dashboard is shared as a locked demo, on request.

EU Radar · calibration: non-EU SaaS / AI / fintech

09 Dec 2026Product Liability Directive (EU) 2024/2853 — software & AI in scope of strict liabilityMajorMember-state transposition deadline · liability chain fixes at first EU placement
02 Aug 2026AI Act — obligations for high-risk AI systems begin applyingMajorAuthorised-representative duty for non-EU providers · staged application
In forceDORA — subcontracting RTS reaches signed ICT contractsFinancialFinancial entities re-open supplier terms · Article 30 register of information
14 Oct 2026Sector item calibrated to the client's productSectorImpact note and recommended action
Q1 2027Consultation window relevant to the client's roadmapWatchFiling option and timing

Illustrative extract. The live Radar is calibrated per client — sources, sectors and impact notes differ.

Request access to the locked demo

Your counsel

A named lawyer, one point of accountability.

The engagement is led end-to-end by Răzvan Alexandru Olaru — avocat at the Bucharest Bar and England & Wales solicitor (non-practising) — working the seam between civil-law and common-law practice, across IT&C, insurance, public procurement and disputes.

The practice is built the way it advises: playbooks written as living documents, deterministic document search, frontier models grounded in your file at runtime — never retaining or reusing it — and every deliverable signed by the counsel whose bar number sits below.

Baroul București (Reg. no. 14381)SRA no. 654347 LinkedIn X / @OlaruRaz

Frequently asked questions

Do we need an EU representative before selling into the EU?

Often, yes — and usually more than one hat. Non-EU companies processing EU personal data typically need a GDPR Article 27 representative; providers of high-risk AI systems need an authorised representative under the AI Act; and under the new Product Liability Directive your importer or representative sits inside the liability chain. We map which apply to your product and structure the appointments deliberately, before your first EU distribution deal fixes them by accident.

Does DORA reach us as a non-EU vendor?

If you provide ICT services to EU banks, insurers or investment firms, DORA reaches you through your contracts: financial entities must impose specific provisions (Article 30) and register you in their register of information. The addendum your EU client sends is negotiable — part required, part over-reach. We review it from the supplier's side.

Which law governs the engagement, and what about our home jurisdiction?

Engagements are governed by Romanian law, with services covering Romanian and EU law. For your home-jurisdiction questions we work alongside your local counsel or refer you within our network — you keep one EU-side counsel and one point of accountability.

Why Bucharest as the EU base?

Romania is an EU member state with deep technical talent and cost-efficient operations, so your EU-facing contracts, representation and disputes strategy sit inside the Union. English is the working language of the engagement.

Scope

English is the working language; engagements are under Romanian law, covering Romanian and EU law. Home-jurisdiction questions are handled with your local counsel or through our referral network — you keep one EU-side counsel and one point of accountability. This page is general information, not legal advice, and does not create a lawyer–client relationship.