AI governance · Privacy · Irvine, California
AI governance your buyers can verify.
Security questionnaires now carry AI sections, ISO 42001 is becoming the answer procurement expects, and the EU AI Act's high-risk obligations arrive in December 2027. I run a fixed-scope readiness assessment that inventories every AI system you use, scores it against all three frameworks, and leaves your team a plan it can execute in ninety days.
Services
Readiness Assessment
Fixed scope. Every AI system, model, and vendor inventoried. Thirty-eight ISO 42001 controls scored zero to four, crosswalked to NIST AI RMF and the EU AI Act. You get an executive readout, a scored heatmap, and a prioritized ninety-day roadmap. Fixed fee, quoted per statement of work.
Governance Retainer
The assessment, kept alive. AI inventory current, vendor and model intake reviewed, questionnaire AI sections answered, policies refreshed, a quarterly report your board can read. A named artifact list, capped hours, monthly.
Advisory
A small number of engagements each year across compliance, operations, and team turnaround. Send a short description of the problem and the timeframe.
Founding clients
Three founding engagements through December at a founding rate, in exchange for a written case study, a testimonial, and one reference call. The full artifact set, no scope cuts.
Sample engagement
Fictional, written as deliveredA Series A clinical-AI company, assessed
Fourteen AI systems inventoried, most of them unowned. Overall maturity 1.3 of 4. Six priority findings, from an ungoverned model vendor to a customer-facing chatbot with no disclosure. The sample report shows exactly what an engagement produces before you pay for one.
Read the sample reportWorth exploring
EU AI Act readiness
High-risk obligations land December 2, 2027. Early 2027 is the sane start.
The ISO 42001 crosswalk
One control set, one body of evidence, three frameworks answered.
Questionnaire AI sections
The AI regulation most companies meet first is a customer's checklist.
Vendor and model intake
A review gate before any new AI tool touches customer data.
Board and exec reporting
A quarterly AI report a director can read in ten minutes.
The fastest way to reach me is email.
A short description of your AI systems and what prompted the question is enough to start. No obligation follows from a conversation.