For Middle East software, AI & fintech companies
One counsel, three fixed-fee packs — entity & representation strategy, the 2026 product-liability regime for software and AI, and DORA supplier terms — run from Bucharest, inside the Union.
9 Dec 2026
software & AI become “products” under EU strict liability
Jan 2025
DORA live — its contract terms flow down to non-EU ICT vendors
Art. 27 / Art. 22
GDPR & AI Act representation duties for non-EU providers
01 · Architecture
Your product, mirrored in law.
Entity and representation strategy (GDPR Art. 27, AI Act authorised representative, product-liability operator chain), the contract stack — terms of service, DPA, reseller and importer agreements — and the operational spine to run it.
Architecture map + contract pack · fixed fee
02 · Product rules
The 2026 liability wall, mapped before you hit it.
From 9 December 2026, software and AI placed on the EU market answer under strict product liability — presumptions of defect, court-ordered disclosure, 10-to-25-year tails. Exposure map, documentation and disclosure readiness, insurance-gap specification.
Scored readiness report + priority redlines · fixed fee
03 · Financial sector
Selling to EU banks and insurers.
DORA has applied since January 2025, and its contractual requirements reach non-EU ICT vendors through every EU financial client. We review the addendum from your side — required versus over-reach versus abusive — with an Article 30 mapping and a pin-cited negotiation memo.
Deviation memo + redline · fixed fee
A calendar-based regulatory watch calibrated to your product and sector — what lands, when, and what it changes for you. Below, a still extract; the live dashboard is shared as a locked demo, on request.
No mail app on this device? Write to raz@olawru.com — subject “EU Radar — locked demo”
Your counsel
The engagement is led end-to-end by Răzvan Alexandru Olaru — avocat at the Bucharest Bar and England & Wales solicitor (non-practising) — working the seam between civil-law and common-law practice. His path runs through banking & finance and corporate work at major Bucharest firms into independent practice across IT&C, insurance, public procurement and disputes, including pleading.
The practice is built the way it advises: playbooks written as living documents, deterministic document search, frontier models grounded in your file at runtime — never retaining or reusing it — and every deliverable signed by the counsel whose bar number sits below. He writes on trust as legal infrastructure; the engagement is designed to earn it: conflict check, client identification and a written fixed-fee scope before any work begins.
Often, yes — and usually more than one hat. Non-EU companies processing EU personal data typically need a GDPR Article 27 representative; providers of high-risk AI systems need an authorised representative under the AI Act; and under the new Product Liability Directive your importer or representative sits inside the liability chain. We map which apply to your product and structure the appointments deliberately, before your first EU distribution deal fixes them by accident.
If you provide ICT services to EU banks, insurers or investment firms, DORA reaches you through your contracts: financial entities must impose specific provisions (Article 30) and register you in their register of information. The addendum your EU client sends is negotiable — part required, part over-reach. We review it from the supplier's side.
Engagements are governed by Romanian law, with services covering Romanian and EU law. For your home-jurisdiction questions we work alongside your local counsel or refer you within our network — you keep one EU-side counsel and one point of accountability.
Romania is an EU member state with deep technical talent and cost-efficient operations: your EU-facing contracts, representation and disputes strategy sit inside the Union, at a fraction of the usual gateway cost. English is the working language of the engagement.