iDharma | Request an AI Audit

Your audit

NYC LL144 Bias Audit $6,500

Fixed price, set by the law. Each extra tool: $1,500. Nothing is charged until you approve.

What the NYC LL144 Bias Audit includes ~2-4 weeks turnaround

Selection or scoring rates and impact ratios for every sex and race/ethnicity category, and their intersections
Bias audit report, signed by an independent auditor
Statistical workbook, so your team can reproduce every figure
Publication-ready summary of results for your careers page (HTML and PDF)
Candidate notice pack, covering the 10-business-day notice
Summary kept live for 12 months, with a 60-day renewal warning

Your audit

EU AI Act Conformity Audit $25,000

Fixed price for this framework. Each extra system: $6,000. Nothing is charged until you approve.

What the EU AI Act Conformity Audit includes ~2-4 weeks turnaround

Classification report: each system placed against Article 5, Article 6 and Annex III
Your role (provider or deployer) settled for each system under Article 25
AI system register your team can keep current
Annex IV documentation index: what you hold, what is thin, what is missing
Article 50 transparency notice pack (HTML and PDF)
Remediation shortlist, every gap mapped to its article

Your audit

California FEHA ADS Bias Audit $6,500

Fixed price for this framework. Each extra tool: $1,500. Nothing is charged until you approve.

What the California FEHA ADS Bias Audit includes ~2-4 weeks turnaround

Testing record: adverse impact across protected characteristics on your own applicants
ADS inventory: every tool in an employment decision, with the in-or-out call
Statistical workbook, so your team can reproduce every figure
Method note, including the small-category rule applied
Findings and response log, ranked by consequence
Vendor evidence pack: what to ask for, and the contract language

Your audit

Illinois HB 3773 Readiness Assessment $6,500

Fixed price for this framework. Each extra tool: $1,500. Nothing is charged until you approve.

What the Illinois HB 3773 Readiness Assessment includes ~2-4 weeks turnaround

Readiness review report, signed by an independent reviewer
AI decision inventory, written to the statute's definition
Effect testing tables by protected class, in a workbook
Proxy review: where ZIP code, or a stand-in for it, is doing work
Notice pack for applicants and employees
Evidence file assembled the way a charge asks for it

Your audit

Colorado SB 26-189 ADMT Audit $12,500

Fixed price for this framework. Each extra system: $3,000. Nothing is charged until you approve.

What the Colorado SB 26-189 ADMT Audit includes ~3-5 weeks turnaround

ADMT register: every system in a decision path, with owner, vendor and materiality call
Covered-ADMT classification memo, with the reasoning written down
Point-of-interaction notice and adverse-outcome disclosure drafts
Meaningful-human-review and data-correction procedure
Three-year retention schedule mapped to your systems of record
Carve-out position memo (insurance, HIPAA, FDA, ECOA/FCRA)

Your audit

Colorado SB 21-169 ECDIS Governance Audit $12,500

Fixed price for this framework. Each extra system: $3,000. Nothing is charged until you approve.

What the Colorado SB 21-169 ECDIS Governance Audit includes ~4-6 weeks turnaround

ECDIS readiness review against the fourteen Section 5.A components
ECDIS and model inventory, in a workbook your teams can keep current
Scope determination memo for each source, including those ruled out
Governance framework pack in the regulation's own numbering
Bias-testing readiness: cohorts, data and pipeline
SERFF filing pack, with the officer attestation or a corrective action plan

Your audit

NAIC AIS Program Review $6,500

Fixed price for this framework. Each extra tool: $1,500. Nothing is charged until you approve.

What the NAIC AIS Program Review includes ~4-8 weeks turnaround

Written AIS Program package, drafted to the Bulletin's structure
AI system inventory across every regulated insurance practice
Adverse-outcome testing, with method, populations and thresholds stated
Vendor evidence pack for third-party AI systems and data
Examination readiness pack, indexed to the Bulletin
State adoption position across every state you write in

Your audit

Texas AI Act Compliance Audit $6,500

Fixed price for this framework. Each extra tool: $1,500. Nothing is charged until you approve.

What the Texas AI Act Compliance Audit includes ~4-8 weeks turnaround

AI system inventory, with a stated purpose for every system
Prohibited-use screening against the four intent categories, per system
Discrimination testing, with the populations stated
NIST AI RMF mapping behind the affirmative defence
Disclosure review, where notice is owed
Cure-readiness pack for the 60-day notice window

Your audit

FTC AI Claims Review $6,500

Fixed price for this framework. Each extra tool: $1,500. Nothing is charged until you approve.

What the FTC AI Claims Review includes ~4-6 weeks turnaround

Claim register of every public statement about what the AI does
Substantiation file, indexed to each surviving claim
Fairness testing on your own population, by group
Dark-pattern and consent review of sign-up, billing and cancellation
Vendor-claim assessment for figures adopted from suppliers
Remediation shortlist, ranked by consequence to consumers

Your audit

SR 26-2 Model Risk Review $25,000

Fixed price for this framework. Each extra system: $6,000. Nothing is charged until you approve.

What the SR 26-2 Model Risk Review includes ~4-8 weeks turnaround

Model risk readiness report across all four areas of the revised guidance
Model inventory reconciled to production, every model rated
Validation report set in one fixed structure, evidence linked
Monitoring plan with thresholds and an action per breach
Vendor governance pack for third-party models
Transition gap list: what survives SR 11-7, what to stop, what to build

Your audit

SS1/23 Model Risk Review $25,000

Fixed price for this framework. Each extra system: $6,000. Nothing is charged until you approve.

What the SS1/23 Model Risk Review includes ~4-8 weeks turnaround

Readiness review against all five principles, in the PRA's numbering
Model inventory reconciled to production
Tiering methodology that changes the treatment each tier receives
Validation methodology and findings register, scaled by tier
Post-model adjustment (PMA) register and monitoring specification
Annual self-assessment, ready for the SMF to sign

Your audit

OSFI E-23 Model Risk Audit $25,000

Fixed price for this framework. Each extra system: $6,000. Nothing is charged until you approve.

What the OSFI E-23 Model Risk Audit includes ~6-8 weeks turnaround

E-23 readiness report a supervisor can read
Model inventory, found from the systems inwards
Risk rating scheme applied across the inventory
Independent review of the highest-rated models
Monitoring design with thresholds and escalation
Lifecycle standards for all five stages, retirement included
Gap plan dated against the 1 May 2027 effective date

Your audit

GDPR AI Compliance Audit $12,500

Fixed price for this framework. Each extra system: $3,000. Nothing is charged until you approve.

What the GDPR AI Compliance Audit includes ~4-6 weeks turnaround

GDPR readiness report, article by article, findings ranked by consequence to people
Article 30 record of processing for the AI system
DPIA screening and a completed DPIA where the processing triggers one
Lawful basis and Article 22 automated-decision review
Data subject rights procedure, covering training data and model outputs
Transfer register for every route out of the EEA

Your audit

HIPAA AI Compliance Audit $12,500

Fixed price for this framework. Each extra system: $3,000. Nothing is charged until you approve.

What the HIPAA AI Compliance Audit includes ~4-6 weeks turnaround

HIPAA review report, findings ranked by consequence to patients
Security Rule risk analysis for the AI system, with a remediation plan
PHI inventory and flow map, training sets and inference logs included
Safeguards evidence pack: access control, encryption, audit logging, integrity
Business associate register with agreement status
Breach runbook with the four-factor assessment written down

Your audit

CCPA / CPRA AI Compliance Audit $12,500

Fixed price for this framework. Each extra system: $3,000. Nothing is charged until you approve.

What the CCPA / CPRA AI Compliance Audit includes ~4-6 weeks turnaround

CCPA and CPRA review report, with the ADMT position stated separately
Data inventory and map for the AI system
Notice at collection and privacy policy review
Risk assessment and automated decision register
Consumer request runbook, against the 45-day clock
Opt-out and opt-out preference signal review

Your audit

Singapore PDPA AI Compliance Audit $12,500

Fixed price for this framework. Each extra system: $3,000. Nothing is charged until you approve.

What the Singapore PDPA AI Compliance Audit includes ~4-6 weeks turnaround

PDPA review report, findings against the PDPC's eleven obligations
Personal data inventory for the AI system
Consent and exception log
Protection, retention and transfer review
Breach assessment procedure and notification pack
Access and correction request pack

Your audit

Qatar PDPL AI Compliance Audit $12,500

Fixed price for this framework. Each extra system: $3,000. Nothing is charged until you approve.

What the Qatar PDPL AI Compliance Audit includes ~4-6 weeks turnaround

Qatar readiness report, each finding tagged with its regime
Regime determination, entity by entity: onshore or QFC
Processing inventory covering the AI system
Consent and permission log, incl. special-nature data
Rights and breach runbooks, against the 72-hour clock
Transfer register and the Article 15 harm assessment
Policy template pack written to the regime that binds you

Your audit

Quebec Law 25 AI Compliance Audit $12,500

Fixed price for this framework. Each extra system: $3,000. Nothing is charged until you approve.

What the Quebec Law 25 AI Compliance Audit includes ~3-4 weeks turnaround

Law 25 review report, findings ranked by consequence to people
Automated decision register, with the s.12.1 notice and human review route
Privacy impact assessment of the AI system, with the screening test
Processing inventory, including transfers out of Quebec
Incident path for the 72-hour notification to the CAI
Consent and notice set, purpose by purpose
Policy template pack written to Law 25

Your audit

Saudi PDPL AI Compliance Audit $12,500

Fixed price for this framework. Each extra system: $3,000. Nothing is charged until you approve.

What the Saudi PDPL AI Compliance Audit includes ~4-6 weeks turnaround

Saudi PDPL review report, findings ranked by consequence to people
Processing inventory covering the AI system
Lawful basis register, a ground per purpose
Automated decision register, with the human review route
Rights and breach runbooks, against the 72-hour SDAIA duty
Cross-border transfer position for each route out of the Kingdom
Policy template pack written to the PDPL

Your audit

UAE PDPL AI Compliance Audit $12,500

Fixed price for this framework. Each extra system: $3,000. Nothing is charged until you approve.

What the UAE PDPL AI Compliance Audit includes ~4-6 weeks turnaround

UAE readiness report, each finding tagged with its regime
Regime determination: federal, DIFC or ADGM, entity by entity
Processing inventory covering the AI system
Basis and consent register, a basis per purpose
Rights and breach runbooks, with the decision-maker named
Transfer register, the condition relied on per route
Policy template pack written to the regime that reaches you

Your audit

Bahrain PDPL AI Compliance Audit $12,500

Fixed price for this framework. Each extra system: $3,000. Nothing is charged until you approve.

What the Bahrain PDPL AI Compliance Audit includes ~4-6 weeks turnaround

Bahrain PDPL review report, the prior-approval position stated first
Prior-approval assessment for the AI system
Data inventory and map: training data, prompts, indexes, logs
Basis and consent record, a basis per purpose
Rights request runbook, tested from the outside in
Transfer and breach pack
Policy template pack written to Bahrain

Your audit

ISO/IEC 42001 Readiness Assessment $12,500

Fixed price for this framework. Each extra system: $3,000. Nothing is charged until you approve.

What the ISO/IEC 42001 Readiness Assessment includes ~4-6 weeks turnaround

Readiness report against clauses 4 to 10 and all 38 Annex A controls
Gap register by clause, with owners and closing evidence
Draft Statement of Applicability, with a justification per control
AI system inventory, as clause 4 and Annex A expect
Impact assessment pack, with one worked assessment
Certification-body brief for stage 1 (we do not issue the certificate)

Your audit

NIST AI RMF Assessment $12,500

Fixed price for this framework. Each extra system: $3,000. Nothing is charged until you approve.

What the NIST AI RMF Assessment includes ~4-6 weeks turnaround

Assessment report across all four functions and 19 categories, signed by an independent assessor
Results against the seven trustworthiness characteristics
Current and target profiles, in a workbook you can re-score
AI system context records, one per system
Cross-framework map to the EU AI Act and ISO/IEC 42001
Remediation shortlist, ranked by consequence to people

Your audit

AI Ethics Audit $6,500

Fixed price for this framework. Each extra tool: $1,500. Nothing is charged until you approve.

What the AI Ethics Audit includes ~3-5 weeks turnaround

AI ethics audit report: a finding against each of the six pillars
Fairness results workbook, so every figure can be reproduced
Ethics charter with an owner and decision gate per principle (HTML and PDF)
Committee pack: terms of reference, escalation route and decision log
Policy register mapped to the six pillars, with gaps named
Remediation shortlist, ranked by consequence to the people affected

Your audit

OECD AI Principles Alignment Audit $6,500

Fixed price for this framework. Each extra tool: $1,500. Nothing is charged until you approve.

What the OECD AI Principles Alignment Audit includes ~3-6 weeks turnaround

Written alignment position against the five principles, gaps named
AI system register: decision, owner and how each system arrived
Evidence file per principle, with the method stated
Cross-framework map to NIST AI RMF, ISO/IEC 42001 and the EU AI Act
Escalation route with a named owner at each step
Board and disclosure memo

Your audit

DORA Operational Resilience Audit $12,500

Fixed price for this framework. Each extra system: $3,000. Nothing is charged until you approve.

What the DORA Operational Resilience Audit includes ~6-8 weeks, confirmed at scoping turnaround

Report against all five pillars, with the AI dependency treated as first-class
Dependency map: every model and endpoint traced to the function it supports
Register of information entries drafted for your AI providers
Contract gap list per provider, including sub-provider chains
Costed exit strategy for each AI-dependent service
Detection review: would model degradation be classified and reported?

Your audit

ISO/IEC 27001 Readiness Assessment $12,500

Fixed price for this framework. Each extra system: $3,000. Nothing is charged until you approve.

What the ISO/IEC 27001 Readiness Assessment includes ~4-6 weeks turnaround

Readiness report against clauses 4-10 and all 93 Annex A controls
Statement of Applicability drafted, every control decided and justified
Risk method, register and treatment plan with owners and dates
ISMS policy and procedure set, written to your operations
Internal audit programme and management review pack
Stage 1 readiness pack: the gap list and evidence, ranked
A readiness opinion - only an accredited body can certify

Your audit

SOC 2 Readiness Assessment $12,500

Fixed price for this framework. Each extra system: $3,000. Nothing is charged until you approve.

What the SOC 2 Readiness Assessment includes ~4-6 weeks turnaround

Readiness report against the Trust Services Criteria, criterion by criterion
System description pack, with the AI in your data path inside the boundary
Control matrix and an evidence plan for the observation period
Access review pack, covering training data and model artefacts
Vendor and carve-out memo for your sub-service organisations
Gap list your CPA firm can start fieldwork from
A readiness opinion - only a licensed CPA firm issues a SOC 2 report

Your audit

PCI-DSS Readiness Assessment $12,500

Fixed price for this framework. Each extra system: $3,000. Nothing is charged until you approve.

What the PCI-DSS Readiness Assessment includes ~4-6 weeks, after scoping turnaround

Readiness report against all twelve PCI DSS v4.0.1 requirements
Cardholder data inventory, including analytics, training sets and model logs
Scope and segmentation pack, with network and data-flow diagrams
Evidence pack, ordered the way a QSA works through it
Validation route memo: which SAQ, or whether a Report on Compliance is needed
AI exposure note: where card data reached your models, and the way out
A readiness view - we are not a QSA and issue no Report on Compliance

Your audit

NIST CSF Audit $12,500

Fixed price for this framework. Each extra system: $3,000. Nothing is charged until you approve.

What the NIST CSF Audit includes ~3-5 weeks turnaround

Assessment report across all six CSF 2.0 functions, gaps ranked by consequence
Current profile, each outcome carrying its record
Target profile, sequenced and costed
AI asset inventory, each asset with an owner and its function
Tier decision memo
Cross-framework map to AI RMF, ISO 27001 and the CIS Controls
Policy and procedure set, written to your operations

Your audit

CIS Controls Audit $6,500

Fixed price for this framework. Each extra tool: $1,500. Nothing is charged until you approve.

What the CIS Controls Audit includes ~3-5 weeks turnaround

Review against all 18 CIS Controls v8.1, in the framework's own order
Scoped to the Implementation Group you work to
Asset and software inventory covering models, endpoints and pipelines
Implementation Group memo, with the reasoning recorded
Safeguard gap list, in build order
Data classification map for training data, indexes and prompt logs
Benchmark baseline note for your serving stack

Your audit

Financial Services AI Audit $12,500

Fixed price for this industry audit. Each extra system: $3,000. Nothing is charged until you approve.

What the Financial Services AI Audit includes ~4-6 weeks turnaround

Audit report on your AI in lending, credit or investment, findings ranked by consequence
Model inventory check: purpose, owner, validation status, limitations
Fair-lending review: disparity testing and adverse-action reason codes
Governance and human-oversight evidence pack
Third-party model and data vendor register with risk notes
Prioritised remediation plan you can hand to your regulator or bank partner

Your audit

Healthcare AI Audit $12,500

Fixed price for this industry audit. Each extra system: $3,000. Nothing is charged until you approve.

What the Healthcare AI Audit includes ~4-6 weeks turnaround

Audit report on your clinical or administrative AI, findings ranked by consequence to patients
Intended-use and risk classification for each AI system
Patient-data review: PHI flows, safeguards and vendor agreements
Validation and bias evidence across patient groups
Human-oversight and incident-handling evidence pack
Prioritised remediation plan for your compliance and clinical leads

Your audit

Insurance AI Audit $12,500

Fixed price for this industry audit. Each extra system: $3,000. Nothing is charged until you approve.

What the Insurance AI Audit includes ~4-6 weeks turnaround

Audit report on your underwriting, pricing, claims or fraud AI, findings ranked by consequence
AI systems inventory with use, owner and consumer impact
Unfair-discrimination testing review across protected classes
External data and vendor register with risk notes
AI program and governance evidence pack for your regulator
Prioritised remediation plan

Request an AI audit - scoped and priced before you pay anything.

Request received

Talk it through first

Message sent