Services
Four ways in. Each stands alone.
For companies whose customers, regulators, or boards have started asking how their AI is governed. Fees are quoted per statement of work, in writing, before any engagement begins.
Readiness Assessment
Fixed scope · fixed fee · the wedge
Every AI system, model, and vendor you use, inventoried: what it does, what data it touches, whether it faces a customer, and who owns it. Then thirty-eight ISO 42001 controls scored zero to four on a defined rubric, each one crosswalked to NIST AI RMF subcategories, EU AI Act articles, and the AI questions that appear in security questionnaires.
You get a written report: an executive summary, the scored heatmap, prioritized findings, and a ninety-day roadmap ordered by what buyers and regulators check first. An executive readout call closes the engagement.
See the sample report for exactly what this produces.
Governance Retainer
Monthly · named artifacts · capped hours
Governance decays the week after the report lands unless someone keeps it current. The retainer is recurring artifact production: the AI inventory kept live, intake reviews for every new vendor and model, security questionnaire AI sections answered, the policy set refreshed on a cycle, impact assessments for new use cases, and a quarterly report written for your executives and board.
Scoped as a named list of artifacts with capped hours, so you always know what the month bought.
Advisory
Selective · scoped per engagement
A small number of engagements each year across compliance, operations, and team turnaround, on their merits. Fifteen years of building these functions inside large technology companies is the background; the work is scoped to the problem. Send a short description of the problem and the timeframe.
Founding clients
Three slots · through December
The practice is new and I price that honestly. Three founding engagements get the full Readiness Assessment at a founding rate, in exchange for a written case study, a testimonial, and one reference call. The full artifact set, no scope cuts, because the case study has to describe the real product.
What I am not
A law firm, a certification body, an audit firm of record, or a software reseller. I do not issue certificates, give legal opinions, or sell you a platform. The assessment names the gaps precisely so your counsel, your auditor, and your tools each start from a cleaner place. Where a question needs a lawyer, I say so.
How I charge
Two ways, and you will always know which one is operating: fixed fees agreed in writing per statement of work, and monthly retainers scoped as a named artifact list with capped hours. No percentage of anything, no commissions from vendors, no pricing surprises after kickoff.
Not sure which door is yours?
Describe the situation in a few sentences. I will tell you which engagement fits, or that none does.