AI compliance
Every AI compliance service, from inventory to evidence.
Six services that follow one another, a vertical dedicated to human resources, and a standing mandate for providers established outside the Union. Each stands on its own: you engage at the step that matches your maturity, and you can stop after any of them.
The services
What each service produces.
AI system inventory and registry
Every AI system in the organisation in a single registry, shadow AI and vendor-embedded AI included. For each one: an owner, a purpose, the data used, the role under the Act and the risk tier. This is the authoritative inventory everything else builds on.
You receive
AI system compliance audit
The audit of one given system, on compliance and on risk: classification, bias, robustness, explainability, human oversight, data governance. The assessment runs black box and needs no access to model weights.
You receive
AI Act remediation
We execute the post-audit action plan and close the identified gaps: technical documentation, classification, provider and deployer duties, human-oversight design, compensating controls. The engagement ends on a file a third party can review.
You receive
AI governance framework
The standing apparatus that takes over from a one-off remediation: committee, policy corpus, RACI, decision and escalation paths, incident management. One control framework is mapped once to your obligations, so a single body of evidence answers the AI Act, ISO/IEC 42001, NIST AI RMF and your sector rules.
You receive
AI governance platform selection
Platform selection run end to end: requirements matrix, RFP, comparative proof of concept on your own cases, total-cost case. The decision rests on tested evidence rather than on a demo.
You receive
Training and AI literacy
Article 4 of the Act requires that the people who use or oversee an AI system have a sufficient level of AI literacy. We build paths by audience: executives, business teams, data and engineering teams, legal and compliance. Each path is assessed before and after, and attestations are kept in a register you can produce.
You receive
AI in human resources
CV screening and ranking, candidate scoring, profile matching, interview analysis, internal mobility: these uses fall under high risk, and the company using them carries deployer obligations of its own. This audit is built for HR and HRIS leaders. It covers the AI Act, GDPR and employment law together, and measures differences in treatment across groups of candidates, including on a closed vendor tool.
You receive
EU authorised representative
A provider established outside the Union must appoint, by written mandate, a representative established in the Union before placing a high-risk AI system or a general-purpose AI model on the EU market. We take that mandate: we review the file before signing, hold the documentation at the disposal of the authorities and act as their named point of contact.
You receive
How the services connect
The inventory feeds the audit. The audit reveals the gaps. Remediation closes them. The governance framework keeps them closed, the platform makes it hold at scale and training makes it live in the teams.
Where to start
If you do not know how many AI systems you run, with the inventory. If one system worries you, with its audit. If the audit is done, with remediation. The method in detail
Next step
Start with one system.
Tell us which system or which estate is in scope. We will come back with a proposed scope, a duration and a fixed fee.