AI compliance before the deadline
The EU AI Act is enforceable, penalties reach €35M or 7% of turnover, and your buyers are already sending AI questionnaires. We inventory your AI, classify it, and wire baseline controls into your highest-risk system first - with a costed roadmap for the rest. From $7,500.
What you get
- AI system inventory and EU AI Act risk classification
- Gap assessment against NIST AI RMF and ISO 42001
- Baseline controls implemented on one AI system: logging, human oversight, documentation
- AI policy and acceptable-use rules your team will actually follow
- Procurement-ready answers for enterprise security questionnaires
You walk away with
AI inventory + risk classification
Included in every engagement - ownership transfers on delivery.
Gap report + remediation roadmap
Included in every engagement - ownership transfers on delivery.
Policies, docs & implemented controls
Included in every engagement - ownership transfers on delivery.
Questions, answered
Does the EU AI Act apply to a company outside the EU?
If your AI system’s output is used in the EU, usually yes - the Act applies extraterritorially, like GDPR did. After the 2026 Digital Omnibus (Regulation (EU) 2026/1744), high-risk obligations apply from 2 December 2027 for Annex III systems and 2 August 2028 for AI in Annex I products; general-purpose AI obligations have applied since August 2025.
Are you lawyers?
No - and that’s the point. Lawyers tell you what must be true; we make it true in your systems: inventories, logging, oversight controls, and documentation your counsel or auditor signs off on. We work alongside your legal advisors, not instead of them.
We’re a startup - isn’t this premature?
Compliance readiness is increasingly a sales requirement, not a legal one: enterprise buyers ask about AI governance in procurement long before a regulator ever would. A lightweight readiness pass now is far cheaper than a scramble during due diligence.
What exactly does $7,500 cover?
An org-wide AI inventory and risk classification, a gap assessment against NIST AI RMF, and baseline controls implemented on one AI system - plus a costed roadmap for the rest. Additional systems are quoted from the roadmap, so there are no surprise scopes. Technical implementation only; we work alongside your legal counsel, not as a substitute for them.