Run: Governance, Risk & Operations
AI Governance & EU AI Act Compliance
Risk classification, conformity documentation, and oversight design aligned to the EU AI Act — with the evidence pack to prove it.
6–8 weeks (framework); ongoing (compliance) Fixed fee + optional retainer
A governance framework built for enforcement, not for the shelf. We inventory your AI systems, classify risk under the EU AI Act, design transparency and human-oversight obligations into each system, run bias and fairness testing, and assemble the compliance evidence pack.
Who it's for
- General Counsel, DPOs, and Chief Risk Officers
- CIOs who need a governance framework engineering teams will follow
- Boards seeking assurance before approving AI spend
What you get
Governance framework and operating procedures
AI system inventory with risk classification
Risk register and control mapping
Compliance evidence pack (technical documentation, logging, oversight design)
How it works
-
01
Inventory & classify
Every AI system, its purpose, and its risk tier.
-
02
Gap analysis
Obligations versus current controls.
-
03
Design
Controls, oversight, documentation, and monitoring requirements.
-
04
Evidence
Assemble and maintain the pack; train the owners.
Proof
Questions
If your systems affect people in the EU, the Act can apply. The same framework also satisfies most national and sector guidance (e.g. DORA, NIST AI RMF).
The framework is. Keeping it current is an ongoing obligation; most clients retain us quarterly or fold it into AgentOps.