AI & Data

AI governance, EU AI Act & ISO 42001 readiness

Risk classification, a gap analysis and a control set your auditor and your EU customer will both accept.

Typical duration
3–5 weeks
Scope
Fixed and written before you sign
Team
Delivered by the principal

Who it is for

EU-exposed enterprises, regulated sectors.

Everything below is in the scope document, written and priced before anything starts. If something you need is not on this list, say so and it goes in the quote — or we tell you it does not belong in this engagement.

  • Inventory and EU AI Act risk classification of every AI system you build or operate
  • ISO/IEC 42001 gap analysis against your current management system
  • Technical documentation, logging and human-oversight design for high-risk systems
  • AI schedule for your MSA covering classification, logging and who holds which obligation
  • Certification sequence costed — ISO 27001 first, then 42001, SOC 2 only on demand

How every AI & Data engagement runs →

Next step

Thirty minutes on whether this is the right engagement.

If a different service on this list fits better, or if you do not need us at all, that is what the call will conclude.