Governance & Economics
AI Governance, Risk & Compliance
Know your AI risk exposure and get ahead of it before a regulator or a customer asks.
Most companies have adopted AI faster than they've documented it, which becomes a real problem the moment a regulator, an auditor, or an enterprise customer's security questionnaire asks for specifics. This engagement builds an actual inventory of where AI is used across the business, classifies the risk level of each system under relevant regulation such as the EU AI Act, and turns that into policy documentation your team will actually use.
Sound familiar?
- ✓You don't have a full inventory of where AI is actually being used across the business
- ✓Regulation like the EU AI Act is approaching and no one owns compliance for it
- ✓Customers or partners are starting to ask AI risk and governance questions you can't answer yet
What the engagement looks like
AI system inventory and risk classification
A clear map of what AI systems exist, what they touch, and how they're classified under relevant regulation.
Policy and documentation
Practical governance policy and documentation, written to actually be used, not just filed away.
Compliance roadmap
A prioritized plan toward EU AI Act or equivalent readiness, scoped to your actual risk level.
This is a good fit if you're…
- Companies with EU exposure facing AI Act deadlines
- Leadership teams that need an AI risk answer for customers or the board
- Anyone who's adopted AI faster than they've documented it
Rate for this engagement runs $150–$250/hr, scoped after a free intro call.
Related services
Frequently asked questions
Is this legal advice?
No. This is practical governance and documentation work: inventories, risk classification, and policy drafting. For binding legal interpretation of your specific obligations, you should also engage counsel, and this work is often done alongside legal review, not instead of it.
Do we need to comply with the EU AI Act if we're not based in the EU?
Potentially, if you offer AI-enabled products or services to users in the EU, regardless of where your company is based. Determining actual exposure is one of the first steps in the engagement.
How long does a full inventory and classification take?
For a small to mid-sized company, typically 15 to 30 hours depending on how many systems are in use and how well-documented they already are. Larger organizations are scoped individually after the free consult.
Ready to get started with AI Governance, Risk & Compliance?
No pitch deck, no obligation. Just a straight answer on whether AI can actually help your situation, and how.
$150–$250/hr · no contracts, no retainers required