[guillermollopis]

The biggest challenge I've seen is the gap between "classification" and "documentation." Most teams can figure out whether they're high-risk (Annex III has 8 clear categories), but then they stare at Annex IV's 9 sections of required documentation and don't know where to start. Practically, I'd recommend: (1) inventory what you already have scattered across design docs, model cards, and Jupyter notebooks — most teams have more than they think, (2) start with Section 2 (development process) and Section 5 (risk management) since those have the biggest gaps, and (3) use the AESIA practical guides from Spain's AI supervisory agency as a reference — Guide 15 specifically covers Annex IV documentation. For tooling, there's a range: EuConform is open-source and offline-first, Credo AI targets enterprises, and Annexa (annexa.eu) does the full workflow from classification to dossier generation for €49/month. Depends on your budget and how much you want to automate vs. write yourself.