Are you even in scope?
Most companies cannot answer that about their own AI systems — not because they are careless, but because the Act attaches obligations per system and per role, and nobody has written down which system is which.
It is also not a question you can settle by jurisdiction. The EU AI Act has extraterritorial scope: if your system or its output is used in the EU, obligations can attach to you — a company in London, Boston, Dubai or Singapore included — and your EU customers and their auditors will ask you to prove where you stand.
The readiness assessment produces the evidence pack that answers them. In four weeks you get a system-by-system determination you can defend to a regulator, a client or a board — and a prioritised list of what to fix first. Delivered remotely, in English, on your time zone.
- One scope, one price, one deadline. No open-ended consulting.
- You keep every artefact whether or not you continue with us.
- We will tell you if you are out of scope. That is a real possible outcome.
- EU AI Act and ISO 42001 evidence — not legal advice in your jurisdiction.
- Duration
- 4 weeks
- Deliverables
- 7
Reply within two business days. No card details are taken on this site.
Engagements run on the engagement terms and the Consulting Services Addendum, both provided before signature.
What this is not
- Not a certification. Nothing here certifies conformity with any standard or regulation.
- Not legal advice. It is an analytical assessment; a lawyer must advise on your legal position.
- Not an ISO 42001 project. It prepares evidence; it does not implement a management system.
- We are not a conformity assessment body and do not act as one.
A 2 weeks diagnostic on 1 system: classification, obligation map and 3 documents. 100% credited against a Readiness Assessment — so it costs you nothing extra if you go ahead.
Scope is not a matter of opinion
The Act attaches obligations per system and per role. These four questions are what the first hour of the engagement establishes, and you can answer them yourself today.
Do you put an AI system on the EU market, or into service, under your own name?
That makes you a provider. Most obligations sit with you.
Do you use AI to make or materially inform decisions about people — hiring, credit, insurance, education, access to services?
That is where the high-risk classification usually lives.
Does an AI system you use produce content the public sees — text, images, audio, video?
Article 50 transparency duties attach to that output.
Are you a customer of an AI system built by someone else, used in your own operations?
You are a deployer. Fewer obligations, but not none.
When we would tell you not to buy this
- You do not put AI on the market and you do not use it on people
- Your AI use is purely internal, back-office and non-decisional
- You are still at proof-of-concept with nothing in production
If that is you, say so on the call and we will say it back. A €6,500 document you did not need is a worse outcome for both of us than a lost sale.
Seven deliverables, each one usable on its own
AI system inventory
Every AI system and AI-assisted workflow, with owner, purpose, data categories and deployment status.
Scope determination
For each system: in scope or out, under which article, and the reasoning that supports it.
Role & obligation map
Provider, deployer, importer or distributor — per system — and which obligations attach to that role.
Risk classification
Prohibited, high-risk, limited-risk or minimal-risk, with the evidence behind each classification.
Gap register
What is already non-compliant today, prioritised by severity, with an accountable owner per item.
90-day remediation roadmap
A sequenced plan: what to fix first, what can wait, and what needs budget sign-off.
Executive readout & board pack
A session with leadership and a two-page summary you can put in front of a board or a client.
Four weeks, sequenced
- 1Week 1Kick-off & intakeScoping workshop, system inventory, evidence request. You meet the assessor who does the work.
- 2Weeks 2–3AssessmentInterviews, documentation review, classification per system, gap analysis against obligations that already apply.
- 3Week 4Findings & readoutGap register, roadmap, board pack, executive readout. Handover of every artefact.
What this is not
A fixed fee means a fixed boundary. This is an assessment, not an implementation and not a legal opinion.
- Technical implementation or model development
- A formal legal opinion
- Certification or notified-body sign-off
- Ongoing monitoring — available as a retainer
If you want it maintained
Optional, sold after the assessment, never bundled into it.
- Light€2,200 per month
- Standard€3,400 per month
- Extended€4,800 per month
Start with a conversation
Nobody buys a readiness assessment from a payment page. Tell us what you are running and we will confirm the scope and the price in writing before anything starts.