I
Assessment
An inventory of the artificial intelligence systems the company uses, the classification of their level of risk, and the identification of the obligations that apply.
Artificial intelligence governance and regulatory compliance.
Phylarkon advises companies operating in Mexico and the European Union, so that their use of artificial intelligence complies with the regulatory framework that applies to them.
Schedule a conversationServices
II
Compliance
Implementation of the obligations governing the company’s use of artificial intelligence: in Mexico, personal data protection legislation; in the European Union, the Artificial Intelligence Act. Together with the documentation that evidences compliance.
III
AI vendor contracts
Review of the terms on which the company procures artificial intelligence systems: liability, data processing, confidentiality and warranties.
IV
Regulatory due diligence
Assessment of artificial intelligence regulatory risk in investments, acquisitions and company sales.
Regulatory timeline
The dates that structure compliance.
The European regulation applies in stages. These are the ones already in effect and those still to come.
European Union
Regulation (EU) 2024/1689, as amended by Regulation (EU) 2026/1744
- 2 Feb 2025
- Prohibited AI practices and the AI literacy duty.
- 2 Aug 2025
- Obligations for general-purpose AI models and the governance framework.
- 2 Aug 2026
- Transparency obligations: interaction with people, synthetic content and deepfakes.
- 2 Dec 2026
- New prohibited practices, and the end of the transitional period for marking synthetic content.
- 2 Dec 2027
- High-risk systems under Annex III: employment, education and essential services, among others.
- 2 Aug 2028
- High-risk systems under Annex I, embedded in regulated products.
Mexico
Federal Law on the Protection of Personal Data Held by Private Parties
- 21 Mar 2025
- Entry into force of the new law, published in the Official Gazette of the Federation on 20 March 2025. It replaces the 2010 law.
- Authority
- The Secretaría Anticorrupción y Buen Gobierno exercises the functions formerly held by INAI, the previous data protection authority.
- Scope
- It governs all processing of personal data by companies, including processing carried out by means of artificial intelligence systems.
Timeline current as of November 2026. The dates for the European regulation reflect the postponements introduced by Regulation (EU) 2026/1744, in force since 27 July 2026. General information only; it is no substitute for an analysis of the specific case.
The firm
The guardian who governs.
The name joins two Greek words: phýlax, the guardian, and árchon, the one who governs. In Plato’s Republic, the guardians are those who watch over the city and answer for it.
That is the task Phylarkon takes on with regard to artificial intelligence: that a company uses it in an orderly way, aware of its obligations and able to demonstrate that it meets them.
Grounding
Every recommendation is tied to the provision that requires it. Nothing is proposed without its legal basis.
Proportionality
Measures are scaled to the actual risk of each system and to the size of the company.
Evidence
Compliance is documented so that it can be demonstrated to a client, an investor or an authority.
Confidentiality
Client information is treated in confidence and used solely for the engagement.
The use of artificial intelligence at Phylarkon
Phylarkon uses artificial intelligence tools to support research and drafting. Every deliverable is reviewed and validated by a person, who is accountable for its content.
Confidential client information is not entered into tools that lack contractual guarantees of confidentiality and of non-use for model training.
Arrange an initial conversation.
Manuel Rodríguez García
Founder