01
What we assess
- Permitted use, sensitive information, and access boundaries.
- Human oversight, approval rights, and escalation duties.
- Evaluation, monitoring, incident handling, and supplier oversight.
FOUNDATIONS / GOVERNANCE
Governance that makes the boundaries clear.
We turn risk and accountability into practical choices: what AI may use, what it may do, which decisions require review, and who is responsible.
THE FOUNDATIONClear boundaries. Named owners.
THE ASSESSMENT
Listen. Review.
Make the gaps visible.
02
Documents needed
- AI, security, privacy, and acceptable-use policies.
- Risk registers, data classifications, and approval matrices.
- Relevant supplier terms, review criteria, incident plans, and control evidence.
03
Typical readiness gaps
- Policies exist, but no one has applied them to the proposed use case.
- Action limits, reviewers, or escalation routes are unclear.
- No agreed evidence for release, monitoring, or stopping the workflow.
04
What we deliver
- Use-case risk and control assessment.
- Clear data and action boundaries with named decision owners.
- Evaluation and approval gates, monitoring responsibilities, and an escalation plan.
The next decision: what is permitted, who approves it, and what evidence is required before release?
Assessment scope is agreed for your business and the workflow you want to improve. Gaps shown here are examples, not findings about your company.