Unified Institutional
Legal & Compliance Framework

Portal Purpose

The Client Portal provides secure access to documents, analytics, communication channels, and AI-assisted tools used in connection with industrial advisory, private-capital activities, and investment workflows.

Human Oversight

All AI outputs are reviewed and approved by:

• —Spas G. Kostov — Chairman of the Supervisory Board
• —General Manager — EL Engineering 2001 Ltd

AI systems do not make autonomous decisions.

Authorized Use

Users may access the Portal solely for legitimate business purposes. Prohibited actions include unauthorized access, misuse of AI content, reverse engineering, or unlawful activity.

Confidentiality

All Portal content is confidential and may not be shared without written authorization.

No Automated Advice

AI-generated content is informational only. Final decisions and recommendations are made exclusively by human executives.

Governing Law

GDPR, UK DPA, DIFC DP Law, U.S. commercial privacy frameworks, and international advisory standards.

Data Controller

EL Engineering Industrial Holdings

Supervisory Contact: Spas G. Kostov

Data Collected

Identification data, login credentials, documents, AI interaction logs, technical data.

Purpose

Advisory delivery, private-capital operations, secure Portal access, AI-assisted analytics, compliance, and system improvement.

Legal Basis

Contractual necessity, legitimate interest, consent, and legal obligations.

International Transfers

GDPR SCCs, UK Addendum, DIFC DP Law safeguards, U.S. commercial frameworks.

User Rights

Access, correction, deletion, restriction, portability, objection.

Security

Encryption, access controls, audit logs, secure infrastructure.

AI Purpose

175 AI agents support analysis, drafting, and operational workflows.

Human Oversight

All outputs validated by:

• —Spas G. Kostov — Chairman of the Supervisory Board
• —General Manager — EL Engineering 2001 Ltd

No Automated Decision-Making

No automated investment decisions, profiling, risk scoring, or approvals.

Data Handling

AI processes only necessary data; no external model training.

Market Risk

Industrial markets may experience volatility.

Operational Risk

AI enhances analysis but does not eliminate operational risk.

Cross-Border Risk

Currency, regulatory, and geopolitical risks may apply.

AI-Related Risk

AI outputs may contain inaccuracies; human validation is mandatory.

No Guarantee

No assurance of performance or investment outcomes.

Regulatory Frameworks

EL Engineering Industrial Holdings complies with:

• —EU GDPR
• —EU AI Act (risk-based governance)
• —UK Data Protection Act
• —DIFC Data Protection Law
• —U.S. commercial privacy frameworks
• —International advisory and private-capital standards

Governance Commitments

We maintain:

• —Human oversight of all AI systems
• —Documented governance and risk frameworks
• —Ethical AI usage
• —Transparent client communication
• —Full accountability for all outputs

Validation Authority

All advisory and investment decisions are validated by:

• —Spas G. Kostov — Chairman of the Supervisory Board
• —General Manager — EL Engineering 2001 Ltd

Purpose

To define the governance structure, oversight mechanisms, and regulatory compliance obligations of EL Engineering Industrial Holdings.

Governance Structure

Authority and oversight are allocated as follows:

• —Supervisory Authority: Spas G. Kostov — Chairman of the Supervisory Board
• —Operational Authority: General Manager — EL Engineering 2001 Ltd
• —AI Governance Committee: Oversees AI usage, compliance, and risk; ensures alignment with the EU AI Act and global standards

Regulatory Domains Covered

• —Data protection (GDPR, UK DPA, DIFC DP Law, U.S. frameworks)
• —AI governance (EU AI Act)
• —Cross-border advisory compliance
• —Private-capital and investment governance
• —Cybersecurity and confidentiality
• —Investor protection

Oversight Mechanisms

• —Mandatory human validation of all AI outputs
• —Documented audit trails
• —Quarterly compliance reviews
• —Annual governance assessment
• —Incident reporting and remediation procedures

Risk Management

• —Market risk
• —Operational risk
• —AI-related analytical risk
• —Cross-border regulatory risk
• —Data protection risk

Ethical Standards

• —Transparency
• —Accountability
• —Human oversight
• —Non-discrimination
• —Responsible AI usage

Purpose

To ensure responsible, ethical, and compliant use of AI systems within EL Engineering Industrial Holdings.

Principles (EU AI Act)

• —Human oversight
• —Transparency
• —Accountability
• —Risk-based governance
• —Data protection
• —Non-discrimination
• —Security and robustness

AI System Classification

Our AI systems fall under “limited-risk” and “medium-risk” categories under the EU AI Act, as they support analysis but do not make autonomous decisions.

Human Oversight

All AI outputs are reviewed and approved by:

• —Spas G. Kostov — Chairman of the Supervisory Board
• —General Manager — EL Engineering 2001 Ltd

No automated investment decisions or automated profiling are used.

Transparency

• —Clients are informed when AI systems are used.
• —AI outputs are clearly labeled as AI-generated drafts.

Data Protection

• —AI systems process only necessary data.
• —No external model training.
• —Full compliance with GDPR, UK DPA, DIFC DP Law, and U.S. frameworks.

Security

AI systems operate within secure, monitored environments with encryption, access controls, and audit logs.

Executive Summary

EL Engineering Industrial Holdings maintains full compliance with international regulatory frameworks governing data protection, AI usage, advisory activities, and private-capital operations.

Data Protection

• —GDPR compliance confirmed
• —UK DPA compliance confirmed
• —DIFC DP Law compliance confirmed
• —U.S. commercial privacy compliance confirmed

AI Governance

• —AI systems classified under EU AI Act as limited-risk and medium-risk
• —No automated decision-making
• —Mandatory human oversight enforced
• —AI Transparency Notice updated

Advisory & Private-Capital Compliance

• —All advisory outputs validated by human executives
• —No unauthorized investment recommendations
• —Cross-border compliance maintained

Cybersecurity

• —Encryption active
• —MFA enforced
• —Audit logs maintained
• —No breaches reported

Risk Review

• —Market Risk: Monitored quarterly; no deviations from expected volatility.
• —Operational Risk: AI systems improved operational efficiency; human oversight mitigated risk.
• —AI-Related Risk: No incidents of AI misalignment; validation procedures effective.
• —Cross-Border Risk: Regulatory changes monitored; compliance maintained.

Governance Actions Taken

• —Updated Responsible AI Policy
• —Strengthened human-in-the-loop validation
• —Expanded audit trail documentation
• —Enhanced Client Portal security
• —Updated investor disclosures

Certification Status & Limitations

This report is a management self-assessment prepared under the oversight of the Supervisory Board. It does not constitute a certification, audit opinion, or legal opinion in any jurisdiction. Statements of operational control (including authentication, encryption, and audit-logging measures) describe the controls maintained by the operating entities on the Client Portal platform and are subject to independent verification.

• —External legal review of each document is maintained prior to material amendment
• —This report is reviewed and re-issued annually
• —Nothing in this report modifies the Regulatory Status disclosure set out in the Important Information section of this website

Outlook for Next Year

• —Continued alignment with EU AI Act implementation
• —Expansion of AI Governance Committee
• —Enhanced investor transparency
• —Strengthened cross-border compliance frameworks