Provenance is being established in the EU and expects to begin work in 2027

Practical EU compliance for data and AI

Build and sell in Europe, with the rules on your side.

The GDPR, the EU AI Act, the Data Act, DORA — Europe’s rules now help decide whether your deal closes, your product launches and your customer says yes. Provenance does the compliance work that gets you there, with your team or alongside your lawyers, so the rules move you forward instead of holding you up.

What Provenance helps with

Which one is today’s problem?

A buyer’s questionnaire is blocking the deal.

Procurement sent a security, privacy or AI questionnaire, and the deal waits on it. Provenance answers every question against your evidence — usually in days.

What Provenance does

You are putting AI into your product.

You need to know what the EU AI Act asks of you, and be able to show it. Provenance builds the assessments, the policies and the evidence.

What Provenance does

A customer wants proof the data is safe.

Where it is stored, where it travels, whether it leaves the EU — with the paperwork to back it. Provenance puts that file together.

What Provenance does

“Who is your EU representative?”

A tender or a customer asks, and you are based outside Europe. Provenance can be that named representative under Article 27.

What Provenance does

A bank’s DORA terms just landed.

You supply a bank or an insurer, and their resilience and security duties now flow down to you. Provenance maps each one to what you can show.

What Provenance does

You need a DPO, not a hire.

A data protection officer’s work — records, data requests, privacy by design — without a full-time salary. Provenance covers it, month to month.

What Provenance does

How the work looks

Every answer comes with its proof.

Whatever the regulation, what Provenance hands over is plain to read. A question, an answer, and the document, record or number behind it.

Where something is not yet in place, the page says so, and gives a date by which it can be. Nothing is called a fact without the evidence to back it.

QuestionAnswerEvidenceStatus
Where is customer data stored?Frankfurt and DublinHosting contract, data-location sheetEvidenced
Is customer data used to train the AI model?NoModel factsheet, supplier termsEvidenced
Has the incident procedure been tested?Written, not yet testedProcedure, version 1Gap · test by 30 June

A page from a sample evidence pack. The entries are a worked example.

Hemant Patil, founder of Provenance

Who is behind it

Twenty-four years in enterprise technology, now governing the data behind it.

Provenance is led by Hemant Patil. He holds the CIPP/E and AIGP — Europe’s main certifications in data protection and AI governance — and is completing an LL.M. in Data Economy Law.

Before that, he spent twenty-four years inside enterprise technology, at Oracle and IBM, across more than forty countries. He has answered a buyer’s hardest questions and asked them, and he knows how to turn a regulation into something your team can actually do.

About Provenance

How it works

One clear piece of work at a time.

You choose what you need. You see what you will get, how long it takes, and roughly what it costs, before you say yes. Then you get something finished — not an open-ended retainer.

Most pieces of work are planned to run one to four weeks and to cost between about €1,500 and €4,000. Ongoing support is planned from about €500 a month.

How it works, and what it costs

Work with Provenance

Work behind the scenes, not only for clients.

Provenance also works behind the scenes: inside a product launch as the compliance capability you do not have yet, behind a law firm as the operational muscle it would rather not staff, or as a standing partner that helps your EU deals clear compliance and reach signature faster.

See how to work with us

Not open yet — worth writing anyway

Tell Provenance what you are working on.

Provenance opens in 2027. Write now and you join the first group of clients, at the founding rate — and you will hear the day the calendar opens. A few lines about the company, the deal or the product, and what is blocking you, are enough. Hemant reads every message himself.