Your audit
NYC LL144 Bias Audit
$6,500
Fixed price, set by the law.
Each extra tool: $1,500. Nothing is charged until you approve.
What the NYC LL144 Bias Audit includes
~2-4 weeks turnaround
- Selection or scoring rates and impact ratios for every sex and race/ethnicity category, and their intersections
- Bias audit report, signed by an independent auditor
- Statistical workbook, so your team can reproduce every figure
- Publication-ready summary of results for your careers page (HTML and PDF)
- Candidate notice pack, covering the 10-business-day notice
- Summary kept live for 12 months, with a 60-day renewal warning
Your audit
EU AI Act Conformity Audit
$25,000
Fixed price for this framework.
Each extra system: $6,000. Nothing is charged until you approve.
What the EU AI Act Conformity Audit includes
~2-4 weeks turnaround
- Classification report: each system placed against Article 5, Article 6 and Annex III
- Your role (provider or deployer) settled for each system under Article 25
- AI system register your team can keep current
- Annex IV documentation index: what you hold, what is thin, what is missing
- Article 50 transparency notice pack (HTML and PDF)
- Remediation shortlist, every gap mapped to its article
Your audit
California FEHA ADS Bias Audit
$6,500
Fixed price for this framework.
Each extra tool: $1,500. Nothing is charged until you approve.
What the California FEHA ADS Bias Audit includes
~2-4 weeks turnaround
- Testing record: adverse impact across protected characteristics on your own applicants
- ADS inventory: every tool in an employment decision, with the in-or-out call
- Statistical workbook, so your team can reproduce every figure
- Method note, including the small-category rule applied
- Findings and response log, ranked by consequence
- Vendor evidence pack: what to ask for, and the contract language
Your audit
Illinois HB 3773 Readiness Assessment
$6,500
Fixed price for this framework.
Each extra tool: $1,500. Nothing is charged until you approve.
What the Illinois HB 3773 Readiness Assessment includes
~2-4 weeks turnaround
- Readiness review report, signed by an independent reviewer
- AI decision inventory, written to the statute's definition
- Effect testing tables by protected class, in a workbook
- Proxy review: where ZIP code, or a stand-in for it, is doing work
- Notice pack for applicants and employees
- Evidence file assembled the way a charge asks for it
Your audit
Colorado SB 26-189 ADMT Audit
$12,500
Fixed price for this framework.
Each extra system: $3,000. Nothing is charged until you approve.
What the Colorado SB 26-189 ADMT Audit includes
~3-5 weeks turnaround
- ADMT register: every system in a decision path, with owner, vendor and materiality call
- Covered-ADMT classification memo, with the reasoning written down
- Point-of-interaction notice and adverse-outcome disclosure drafts
- Meaningful-human-review and data-correction procedure
- Three-year retention schedule mapped to your systems of record
- Carve-out position memo (insurance, HIPAA, FDA, ECOA/FCRA)
Your audit
Colorado SB 21-169 ECDIS Governance Audit
$12,500
Fixed price for this framework.
Each extra system: $3,000. Nothing is charged until you approve.
What the Colorado SB 21-169 ECDIS Governance Audit includes
~4-6 weeks turnaround
- ECDIS readiness review against the fourteen Section 5.A components
- ECDIS and model inventory, in a workbook your teams can keep current
- Scope determination memo for each source, including those ruled out
- Governance framework pack in the regulation's own numbering
- Bias-testing readiness: cohorts, data and pipeline
- SERFF filing pack, with the officer attestation or a corrective action plan
Your audit
NAIC AIS Program Review
$6,500
Fixed price for this framework.
Each extra tool: $1,500. Nothing is charged until you approve.
What the NAIC AIS Program Review includes
~4-8 weeks turnaround
- Written AIS Program package, drafted to the Bulletin's structure
- AI system inventory across every regulated insurance practice
- Adverse-outcome testing, with method, populations and thresholds stated
- Vendor evidence pack for third-party AI systems and data
- Examination readiness pack, indexed to the Bulletin
- State adoption position across every state you write in
Your audit
Texas AI Act Compliance Audit
$6,500
Fixed price for this framework.
Each extra tool: $1,500. Nothing is charged until you approve.
What the Texas AI Act Compliance Audit includes
~4-8 weeks turnaround
- AI system inventory, with a stated purpose for every system
- Prohibited-use screening against the four intent categories, per system
- Discrimination testing, with the populations stated
- NIST AI RMF mapping behind the affirmative defence
- Disclosure review, where notice is owed
- Cure-readiness pack for the 60-day notice window
Your audit
FTC AI Claims Review
$6,500
Fixed price for this framework.
Each extra tool: $1,500. Nothing is charged until you approve.
What the FTC AI Claims Review includes
~4-6 weeks turnaround
- Claim register of every public statement about what the AI does
- Substantiation file, indexed to each surviving claim
- Fairness testing on your own population, by group
- Dark-pattern and consent review of sign-up, billing and cancellation
- Vendor-claim assessment for figures adopted from suppliers
- Remediation shortlist, ranked by consequence to consumers
Your audit
SR 26-2 Model Risk Review
$25,000
Fixed price for this framework.
Each extra system: $6,000. Nothing is charged until you approve.
What the SR 26-2 Model Risk Review includes
~4-8 weeks turnaround
- Model risk readiness report across all four areas of the revised guidance
- Model inventory reconciled to production, every model rated
- Validation report set in one fixed structure, evidence linked
- Monitoring plan with thresholds and an action per breach
- Vendor governance pack for third-party models
- Transition gap list: what survives SR 11-7, what to stop, what to build
Your audit
SS1/23 Model Risk Review
$25,000
Fixed price for this framework.
Each extra system: $6,000. Nothing is charged until you approve.
What the SS1/23 Model Risk Review includes
~4-8 weeks turnaround
- Readiness review against all five principles, in the PRA's numbering
- Model inventory reconciled to production
- Tiering methodology that changes the treatment each tier receives
- Validation methodology and findings register, scaled by tier
- Post-model adjustment (PMA) register and monitoring specification
- Annual self-assessment, ready for the SMF to sign
Your audit
OSFI E-23 Model Risk Audit
$25,000
Fixed price for this framework.
Each extra system: $6,000. Nothing is charged until you approve.
What the OSFI E-23 Model Risk Audit includes
~6-8 weeks turnaround
- E-23 readiness report a supervisor can read
- Model inventory, found from the systems inwards
- Risk rating scheme applied across the inventory
- Independent review of the highest-rated models
- Monitoring design with thresholds and escalation
- Lifecycle standards for all five stages, retirement included
- Gap plan dated against the 1 May 2027 effective date
Your audit
GDPR AI Compliance Audit
$12,500
Fixed price for this framework.
Each extra system: $3,000. Nothing is charged until you approve.
What the GDPR AI Compliance Audit includes
~4-6 weeks turnaround
- GDPR readiness report, article by article, findings ranked by consequence to people
- Article 30 record of processing for the AI system
- DPIA screening and a completed DPIA where the processing triggers one
- Lawful basis and Article 22 automated-decision review
- Data subject rights procedure, covering training data and model outputs
- Transfer register for every route out of the EEA
Your audit
HIPAA AI Compliance Audit
$12,500
Fixed price for this framework.
Each extra system: $3,000. Nothing is charged until you approve.
What the HIPAA AI Compliance Audit includes
~4-6 weeks turnaround
- HIPAA review report, findings ranked by consequence to patients
- Security Rule risk analysis for the AI system, with a remediation plan
- PHI inventory and flow map, training sets and inference logs included
- Safeguards evidence pack: access control, encryption, audit logging, integrity
- Business associate register with agreement status
- Breach runbook with the four-factor assessment written down
Your audit
CCPA / CPRA AI Compliance Audit
$12,500
Fixed price for this framework.
Each extra system: $3,000. Nothing is charged until you approve.
What the CCPA / CPRA AI Compliance Audit includes
~4-6 weeks turnaround
- CCPA and CPRA review report, with the ADMT position stated separately
- Data inventory and map for the AI system
- Notice at collection and privacy policy review
- Risk assessment and automated decision register
- Consumer request runbook, against the 45-day clock
- Opt-out and opt-out preference signal review
Your audit
Singapore PDPA AI Compliance Audit
$12,500
Fixed price for this framework.
Each extra system: $3,000. Nothing is charged until you approve.
What the Singapore PDPA AI Compliance Audit includes
~4-6 weeks turnaround
- PDPA review report, findings against the PDPC's eleven obligations
- Personal data inventory for the AI system
- Consent and exception log
- Protection, retention and transfer review
- Breach assessment procedure and notification pack
- Access and correction request pack
Your audit
Qatar PDPL AI Compliance Audit
$12,500
Fixed price for this framework.
Each extra system: $3,000. Nothing is charged until you approve.
What the Qatar PDPL AI Compliance Audit includes
~4-6 weeks turnaround
- Qatar readiness report, each finding tagged with its regime
- Regime determination, entity by entity: onshore or QFC
- Processing inventory covering the AI system
- Consent and permission log, incl. special-nature data
- Rights and breach runbooks, against the 72-hour clock
- Transfer register and the Article 15 harm assessment
- Policy template pack written to the regime that binds you
Your audit
Quebec Law 25 AI Compliance Audit
$12,500
Fixed price for this framework.
Each extra system: $3,000. Nothing is charged until you approve.
What the Quebec Law 25 AI Compliance Audit includes
~3-4 weeks turnaround
- Law 25 review report, findings ranked by consequence to people
- Automated decision register, with the s.12.1 notice and human review route
- Privacy impact assessment of the AI system, with the screening test
- Processing inventory, including transfers out of Quebec
- Incident path for the 72-hour notification to the CAI
- Consent and notice set, purpose by purpose
- Policy template pack written to Law 25
Your audit
Saudi PDPL AI Compliance Audit
$12,500
Fixed price for this framework.
Each extra system: $3,000. Nothing is charged until you approve.
What the Saudi PDPL AI Compliance Audit includes
~4-6 weeks turnaround
- Saudi PDPL review report, findings ranked by consequence to people
- Processing inventory covering the AI system
- Lawful basis register, a ground per purpose
- Automated decision register, with the human review route
- Rights and breach runbooks, against the 72-hour SDAIA duty
- Cross-border transfer position for each route out of the Kingdom
- Policy template pack written to the PDPL
Your audit
UAE PDPL AI Compliance Audit
$12,500
Fixed price for this framework.
Each extra system: $3,000. Nothing is charged until you approve.
What the UAE PDPL AI Compliance Audit includes
~4-6 weeks turnaround
- UAE readiness report, each finding tagged with its regime
- Regime determination: federal, DIFC or ADGM, entity by entity
- Processing inventory covering the AI system
- Basis and consent register, a basis per purpose
- Rights and breach runbooks, with the decision-maker named
- Transfer register, the condition relied on per route
- Policy template pack written to the regime that reaches you
Your audit
Bahrain PDPL AI Compliance Audit
$12,500
Fixed price for this framework.
Each extra system: $3,000. Nothing is charged until you approve.
What the Bahrain PDPL AI Compliance Audit includes
~4-6 weeks turnaround
- Bahrain PDPL review report, the prior-approval position stated first
- Prior-approval assessment for the AI system
- Data inventory and map: training data, prompts, indexes, logs
- Basis and consent record, a basis per purpose
- Rights request runbook, tested from the outside in
- Transfer and breach pack
- Policy template pack written to Bahrain
Your audit
ISO/IEC 42001 Readiness Assessment
$12,500
Fixed price for this framework.
Each extra system: $3,000. Nothing is charged until you approve.
What the ISO/IEC 42001 Readiness Assessment includes
~4-6 weeks turnaround
- Readiness report against clauses 4 to 10 and all 38 Annex A controls
- Gap register by clause, with owners and closing evidence
- Draft Statement of Applicability, with a justification per control
- AI system inventory, as clause 4 and Annex A expect
- Impact assessment pack, with one worked assessment
- Certification-body brief for stage 1 (we do not issue the certificate)
Your audit
NIST AI RMF Assessment
$12,500
Fixed price for this framework.
Each extra system: $3,000. Nothing is charged until you approve.
What the NIST AI RMF Assessment includes
~4-6 weeks turnaround
- Assessment report across all four functions and 19 categories, signed by an independent assessor
- Results against the seven trustworthiness characteristics
- Current and target profiles, in a workbook you can re-score
- AI system context records, one per system
- Cross-framework map to the EU AI Act and ISO/IEC 42001
- Remediation shortlist, ranked by consequence to people
Your audit
AI Ethics Audit
$6,500
Fixed price for this framework.
Each extra tool: $1,500. Nothing is charged until you approve.
What the AI Ethics Audit includes
~3-5 weeks turnaround
- AI ethics audit report: a finding against each of the six pillars
- Fairness results workbook, so every figure can be reproduced
- Ethics charter with an owner and decision gate per principle (HTML and PDF)
- Committee pack: terms of reference, escalation route and decision log
- Policy register mapped to the six pillars, with gaps named
- Remediation shortlist, ranked by consequence to the people affected
Your audit
OECD AI Principles Alignment Audit
$6,500
Fixed price for this framework.
Each extra tool: $1,500. Nothing is charged until you approve.
What the OECD AI Principles Alignment Audit includes
~3-6 weeks turnaround
- Written alignment position against the five principles, gaps named
- AI system register: decision, owner and how each system arrived
- Evidence file per principle, with the method stated
- Cross-framework map to NIST AI RMF, ISO/IEC 42001 and the EU AI Act
- Escalation route with a named owner at each step
- Board and disclosure memo
Your audit
DORA Operational Resilience Audit
$12,500
Fixed price for this framework.
Each extra system: $3,000. Nothing is charged until you approve.
What the DORA Operational Resilience Audit includes
~6-8 weeks, confirmed at scoping turnaround
- Report against all five pillars, with the AI dependency treated as first-class
- Dependency map: every model and endpoint traced to the function it supports
- Register of information entries drafted for your AI providers
- Contract gap list per provider, including sub-provider chains
- Costed exit strategy for each AI-dependent service
- Detection review: would model degradation be classified and reported?
Your audit
ISO/IEC 27001 Readiness Assessment
$12,500
Fixed price for this framework.
Each extra system: $3,000. Nothing is charged until you approve.
What the ISO/IEC 27001 Readiness Assessment includes
~4-6 weeks turnaround
- Readiness report against clauses 4-10 and all 93 Annex A controls
- Statement of Applicability drafted, every control decided and justified
- Risk method, register and treatment plan with owners and dates
- ISMS policy and procedure set, written to your operations
- Internal audit programme and management review pack
- Stage 1 readiness pack: the gap list and evidence, ranked
- A readiness opinion - only an accredited body can certify
Your audit
SOC 2 Readiness Assessment
$12,500
Fixed price for this framework.
Each extra system: $3,000. Nothing is charged until you approve.
What the SOC 2 Readiness Assessment includes
~4-6 weeks turnaround
- Readiness report against the Trust Services Criteria, criterion by criterion
- System description pack, with the AI in your data path inside the boundary
- Control matrix and an evidence plan for the observation period
- Access review pack, covering training data and model artefacts
- Vendor and carve-out memo for your sub-service organisations
- Gap list your CPA firm can start fieldwork from
- A readiness opinion - only a licensed CPA firm issues a SOC 2 report
Your audit
PCI-DSS Readiness Assessment
$12,500
Fixed price for this framework.
Each extra system: $3,000. Nothing is charged until you approve.
What the PCI-DSS Readiness Assessment includes
~4-6 weeks, after scoping turnaround
- Readiness report against all twelve PCI DSS v4.0.1 requirements
- Cardholder data inventory, including analytics, training sets and model logs
- Scope and segmentation pack, with network and data-flow diagrams
- Evidence pack, ordered the way a QSA works through it
- Validation route memo: which SAQ, or whether a Report on Compliance is needed
- AI exposure note: where card data reached your models, and the way out
- A readiness view - we are not a QSA and issue no Report on Compliance
Your audit
NIST CSF Audit
$12,500
Fixed price for this framework.
Each extra system: $3,000. Nothing is charged until you approve.
What the NIST CSF Audit includes
~3-5 weeks turnaround
- Assessment report across all six CSF 2.0 functions, gaps ranked by consequence
- Current profile, each outcome carrying its record
- Target profile, sequenced and costed
- AI asset inventory, each asset with an owner and its function
- Tier decision memo
- Cross-framework map to AI RMF, ISO 27001 and the CIS Controls
- Policy and procedure set, written to your operations
Your audit
CIS Controls Audit
$6,500
Fixed price for this framework.
Each extra tool: $1,500. Nothing is charged until you approve.
What the CIS Controls Audit includes
~3-5 weeks turnaround
- Review against all 18 CIS Controls v8.1, in the framework's own order
- Scoped to the Implementation Group you work to
- Asset and software inventory covering models, endpoints and pipelines
- Implementation Group memo, with the reasoning recorded
- Safeguard gap list, in build order
- Data classification map for training data, indexes and prompt logs
- Benchmark baseline note for your serving stack
Your audit
Financial Services AI Audit
$12,500
Fixed price for this industry audit.
Each extra system: $3,000. Nothing is charged until you approve.
What the Financial Services AI Audit includes
~4-6 weeks turnaround
- Audit report on your AI in lending, credit or investment, findings ranked by consequence
- Model inventory check: purpose, owner, validation status, limitations
- Fair-lending review: disparity testing and adverse-action reason codes
- Governance and human-oversight evidence pack
- Third-party model and data vendor register with risk notes
- Prioritised remediation plan you can hand to your regulator or bank partner
Your audit
Healthcare AI Audit
$12,500
Fixed price for this industry audit.
Each extra system: $3,000. Nothing is charged until you approve.
What the Healthcare AI Audit includes
~4-6 weeks turnaround
- Audit report on your clinical or administrative AI, findings ranked by consequence to patients
- Intended-use and risk classification for each AI system
- Patient-data review: PHI flows, safeguards and vendor agreements
- Validation and bias evidence across patient groups
- Human-oversight and incident-handling evidence pack
- Prioritised remediation plan for your compliance and clinical leads
Your audit
Insurance AI Audit
$12,500
Fixed price for this industry audit.
Each extra system: $3,000. Nothing is charged until you approve.
What the Insurance AI Audit includes
~4-6 weeks turnaround
- Audit report on your underwriting, pricing, claims or fraud AI, findings ranked by consequence
- AI systems inventory with use, owner and consumer impact
- Unfair-discrimination testing review across protected classes
- External data and vendor register with risk notes
- AI program and governance evidence pack for your regulator
- Prioritised remediation plan
Not sure? Pick the closest - we'll right-size it before we charge anything.
What the Quick Scan includes
~1 week turnaround
- Review of up to 3 AI systems or tools
- Top-priority risk and gap findings
- A prioritized action list you can act on
- 14 business days of written follow-up in your portal
What the Compliance Audit includes
~2–3 weeks turnaround
- Full check of where you fall short of the rules that apply to you
- Checked against the EU AI Act, GDPR Article 22, and the standards that apply to you
- A prioritized plan for fixing what we find
- Documentation and policy review
- Executive summary report
What the Risk Audit includes
~4 weeks turnaround
- Everything in the Compliance Audit, plus:
- Bias and fairness testing
- Security review including adversarial probing
- Model and training-data provenance review
- A risk briefing you can present to your board