Our Services
Clear Deliverables, Fixed Price, No Time Billing
Every service comes with a fixed price, a defined scope, and a clear list of deliverables. You know exactly what you're getting before you sign anything. No hourly billing, no scope creep, no surprises. If your situation requires something outside the standard package, we'll tell you upfront and agree on it together.
AI Risk Assessment
A structured assessment of all AI systems in your organisation, what they do, how they're used, and where your legal and operational risks are. Built for companies that use AI but haven't yet taken stock of what that means from a compliance or security perspective. You walk away with a clear, prioritised picture of where you stand and what to fix first.
Deliverables:
- Assessment Report (Executive Summary) with overview of risks and measures
- Assessment Report (Technical Version) with system classification and gap analysis
- AI-Riskregister with prioritized risks and deadlines
- EU AI Act classification of the customer’s existing AI system
- Presentation meeting on the 5 most important findings and consequences
EU AI Act Compliance Analysis
A detailed analysis of your obligations under the EU AI Act, system by system, article by article. Built for companies that operate, deploy or procure AI systems and need to understand exactly what the law requires of them before regulators start asking questions. You receive a complete compliance status per system and a roadmap to get there.
Deliverables:
- AI System Inventory Register with detailed classification of the EU AI Act
- Reviewed and adapted AI Usage Policy according to legal documentation requirements
- Assessment Report (Technical Version) with compliance status and timeline for deadlines
- Structured support and documentation for compliance assessment of high-risk systems
- Presentation meeting with recommendations for next steps
NIS2 (AI) Compliance Analysis
An assessment of how your AI systems create obligations under NIS2, and what you need to do about it. Built for companies in NIS2 covered sectors who want to understand how AI-specific risks intersect with their broader cybersecurity obligations. You get a concrete action plan and the documentation to back it up.
Deliverables:
- Assessment Report focused on NIS2 reporting obligations and security measures
- Customized AI Incident Management Plan with regulatory reporting deadlines
- AI Supplier Assessment performed to identify critical supply chain risks
- Updated AI Responsibility Matrix (RACI) ensuring NIS2 specific responsibility roles
- Presentation meeting that clarifies sanction levels and regulatory exposure
ISO 42001 Preparations
End-to-end preparations for ISO/IEC 42001:2023 certification, from gap analysis to a fully implemented AI management system. Built for organisations ready to make a formal commitment to responsible AI governance. When we're done, you have every document, policy and process your auditor will ask for.
Deliverables:
- Complete set of Implemented Governance Documents, including AI Data Governance Policy
- Established AI System Inventory and AI Risk Register according to the standard’s requirements
- Documented Internal Audit Report with corrected deviations
- Structured basis and Documented decision for management’s formal review
- Assessment Report (Final Report) and a completed documentation package ready for the certification body
AI Security Awareness Masterclass
A hands-on training programme that teaches your team how to use AI securely, responsibly and in line with the law. Built for organisations where employees use AI tools daily but have never received structured guidance on what's allowed, what's risky and what could land the company in trouble. Fully adapted to your specific AI systems and risk profile.
Deliverables:
- Tailored Presentation Material based on the customer’s own AI system and risks
- Interactive exercises and quizzes for hands-on learning
- Documented Knowledge Evaluation that proves achieved learning objectives
- Official Certificates of Participation that meet the documentation requirements of ISO 42001 and the EU AI Act.
AI Vendor Due Diligence
A fast, structured assessment of an AI vendor or tool you're considering, before you sign the contract. Built for companies evaluating new AI systems who want to know whether the vendor is safe, legally compliant, and the right fit before they commit. You get a clear recommendation: approve, approve with conditions, or walk away.
Deliverables:
- Assessment Report (Executive Version) with a clear recommendation to approve or reject the supplier
- EU AI Act classification of the specific AI tool
- Performed AI Vendor Assessment regarding data security and EU AI Act compliance
- Review of the Supplier’s Terms of Service with specific focus on training data clauses