- Home
- Industries
- Industry and manufacturing
AI agents for manufacturing and industrial companies
Industrial companies run on documents too: quality records, supplier certificates, service reports and technical files. We build agents for that paperwork, never for safety or control functions, and we track the product rules that start to apply.
The problems we hear first
Non-conformity records
Technicians note a deviation in a few words; a quality engineer turns it into a full record later.
Supplier certificates
Declarations and certificates arrive in every format and have to be checked against your requirements.
Service and maintenance reports
Field notes and photos become customer reports by hand, at the end of a long day.
New product rules
The Machinery Regulation applies from 14 January 2027 and the Cyber Resilience Act’s reporting duties since 11 September 2026: more documentation, more deadlines.
Each one prepares. A person decides.
Examples of what we build in this sector, not client work. For each one: where a person approves, and what it never does.
Quality record drafter
Turns technician notes and photos into a non-conformity record in your template, matched to the drawing and the inspection plan.
- A person approves
- A quality engineer decides the disposition.
- It never
- Release, rework or scrap a part.
Supplier document checker
Checks certificates and declarations against your requirements and lists what is missing or expired.
- A person approves
- Purchasing or quality approves the supplier.
- It never
- Approve or block a supplier.
Service report assistant
Drafts the customer report from field notes, photos and the job’s checklist.
- A person approves
- The technician or team lead signs it.
- It never
- Send a report or close a job.
Technical file assistant
Drafts sections of technical documentation and instructions from your approved sources.
- A person approves
- An engineer signs every section.
- It never
- Act as, or design, a safety component.
One job, step by step, with the person inside the flow.
A non-conformity record
A technician logs a dimensional deviation on a batch of housings. The agent drafts the record; a quality engineer decides.
- Sector
- Manufacturing
- Risk class
- Not a safety component (Annex I); reasons kept
- Who decides
- A quality engineer
- Note receivedA short transcript and two photos from the line (sample).Done
- Matched to the standardThe drawing tolerance and the inspection plan section it falls under.Done
- Record draftedDescription, affected batch and a containment proposal, in your template.Drafted
- Repeat issueThe same deviation on the same tool five weeks ago (sample); the records are linked.Flagged
- Waiting for the quality engineerThe disposition is a person’s decision.ReworkScrapUse as isAI Act Art. 14Waiting for a person
- Supplier notifiedOnly after the engineer decides.Locked
- Run recordedThe note, the draft, the engineer’s changes and the decision.AI Act Art. 12On record
A sample, scripted on invented data: no model is called and nothing here is client work.
Where the law draws the line for you
Each rule with the day we read it. An engineer’s reading for your counsel to confirm, not legal advice. How we read the AI Act.
| Rule | What it says (our summary; quotes are verbatim) | What it means for an agent |
|---|---|---|
| AI Act Art. 6(1), Annex IRead 12 November 2026 | AI that is a safety component of a product under Annex I law, or is such a product, is high-risk where that law requires a third-party conformity assessment; from 2 August 2028 (Art. 113). | We don’t build safety components; documentation agents stay outside Annex I. |
| Machinery Regulation (EU) 2023/1230, Art. 54Read 12 November 2026 | Applies from 14 January 2027, when the Machinery Directive 2006/42/EC is repealed (Art. 51). | Technical files drafted from then on follow the new rules. The agent drafts; an engineer signs. |
| Cyber Resilience Act (EU) 2024/2847, Art. 71Read 12 November 2026 | Applies from 11 December 2027; the manufacturers’ reporting duties in Art. 14 apply from 11 September 2026. | An agent can prepare a draft report from your incident notes; the person responsible submits it. |
| NIS2 Annex IIRead 12 November 2026 | Manufacturing of medical devices, electronics, electrical equipment, machinery, motor vehicles and other transport equipment is an “other critical sector”; Art. 21(2)(d) covers supply-chain security. | We answer your supplier security review layer by layer, including what is still partial. |
| GDPR Art. 5(1)(c)Read 9 November 2026 | Data “adequate, relevant and limited to what is necessary”. | Field notes often name workers and customers; the agent reads only what the record needs. |
Nine layers around every agent, each with what is partial.
- Access and identityGoogle sign-in, revocable keys, an agent’s rights narrowed by its spec.Partial No MFA of our own and no enterprise SSO; open sign-up is on.
- Separation between clientsEvery record and search index filtered by the signed-in identity; a live agent gets its own containers and database.Partial Logical separation in one shared database, not yet tested independently.
- Hosting, network, encryptionHetzner, Nuremberg; HTTPS with HSTS; no inbound web ports; credentials sealed.Partial Stored data in general is not encrypted at rest.
- Only the data the task needsThe agent reaches only the systems its approved spec declares; secrets are scrubbed.Partial Personal data is not masked before the model.
- The model stepProvider set per deployment; each request admitted and recorded before it is sent.Partial The region is named in your contract, not promised EU-only.
- Untrusted content and testingDocuments are data, never instructions; a safety pack that must all pass.Partial No independent penetration test yet.
- A person decidesWrites wait for a person; a person approves every release; Stop and spend caps.Partial A live agent’s held actions are approved by our operator, not on your screen.
- Every run on recordEvery run recorded step by step, with approvals and who decided.Partial Append-only by convention, not tamper-evident; no client export screen.
- Deletion, export, backupsErasure with a receipt per step; a backup before every release.Partial Export and account deletion by hand, on request; backups not encrypted.
A timeline up front, a fixed price after one call.
Most teams start with a readiness review of the process they have in mind, or go straight to a pilot when the use case is clearly outside the high-risk list. We don’t publish prices: the proposal after a short scoping call gives a fixed price for your scope, in EUR, excluding VAT.
All engagements and what moves the priceBook a callPrice on request
AI Act and GDPR readiness for one use case.
What’s in itBook a callPrice on request
One agent on one process, tested and approved.
What’s in itQuestions from industry and manufacturing
Will the agent control machines or production?
No. We build agents for documents and records, not for safety functions or control. A safety component would make it high-risk under Annex I and would need a manufacturer’s conformity route.
Can it read our ERP or MES?
Through their APIs, where they have one, or through reviewed read-only database queries, built and tested in your project. Writes ask a person each time unless you decide otherwise in writing.
Does the Machinery Regulation affect documentation tools?
It applies from 14 January 2027 to machinery and related products, including their technical documentation. A drafting agent doesn’t make your machine an AI system, but what it drafts must meet the new rules, so an engineer signs every section.
Can it help with Cyber Resilience Act reporting?
It can prepare a draft from your incident notes for the person who submits it. The manufacturers’ reporting duties apply from 11 September 2026 (Art. 71, Art. 14); the main rules from 11 December 2027.
Related pages
Posts on these rules
Bring one process. Leave with a risk class, a pass bar and a plan.
A 45-minute scoping call with the people who would build it. You get a first view of the AI Act risk class, the controls it needs, and whether an agent is the right tool at all.