AI compliance before the deadline
The EU AI Act is enforceable, penalties reach €35M or 7% of turnover, and your buyers are already sending AI questionnaires. We inventory your AI, classify it, and wire baseline controls into your highest-risk system first — with a costed roadmap for the rest. From $7,500.
What you get
- AI system inventory and EU AI Act risk classification
- Gap assessment against NIST AI RMF and ISO 42001
- Baseline controls implemented on one AI system: logging, human oversight, documentation
- AI policy and acceptable-use rules your team will actually follow
- Procurement-ready answers for enterprise security questionnaires
You walk away with
AI inventory + risk classification
Included in every engagement — ownership transfers on delivery.
Gap report + remediation roadmap
Included in every engagement — ownership transfers on delivery.
Policies, docs & implemented controls
Included in every engagement — ownership transfers on delivery.
Questions, answered
Does the EU AI Act apply to a company outside the EU?
If your AI system’s output is used in the EU, usually yes — the Act applies extraterritorially, like GDPR did. High-risk obligations are enforceable from August 2026, and general-purpose AI obligations are already in force.
Are you lawyers?
No — and that’s the point. Lawyers tell you what must be true; we make it true in your systems: inventories, logging, oversight controls, and documentation your counsel or auditor signs off on. We work alongside your legal advisors, not instead of them.
We’re a startup — isn’t this premature?
Compliance readiness is increasingly a sales requirement, not a legal one: enterprise buyers ask about AI governance in procurement long before a regulator ever would. A lightweight readiness pass now is far cheaper than a scramble during due diligence.
What exactly does $7,500 cover?
An org-wide AI inventory and risk classification, a gap assessment against NIST AI RMF, and baseline controls implemented on one AI system — plus a costed roadmap for the rest. Additional systems are quoted from the roadmap, so there are no surprise scopes. Technical implementation only; we work alongside your legal counsel, not as a substitute for them.