SPC-11 / Service
AI governance & EU AI Act readiness
We help companies use AI responsibly and prove it. We inventory the AI systems you build and buy, help classify them against the EU AI Act risk categories with your legal team, and engineer what the frameworks expect in practice: logging, human oversight, data governance, evaluation, transparency notices and technical documentation. We are engineers, not lawyers, and work alongside your counsel.
01 / Capabilities
Inventory
A register of every AI system in use, its purpose, data, owner and supplier.
Controls
Audit logs, approval steps, access controls and monitoring engineered into the systems themselves.
Testing
Evaluation suites for accuracy, bias and robustness, rerun on every change.
Documentation
Technical files, model cards and transparency notices your compliance team can review.
02 / How we deliver it
phase 01
Assess
Inventory and gap review against the frameworks that apply to you.
phase 02
Prioritise
A risk-ranked plan agreed with your legal and compliance teams.
phase 03
Engineer
Controls, logging, testing and documentation implemented system by system.
phase 04
Maintain
Ongoing monitoring and updates as systems and rules change.
03 / What changes
- A clear picture of where AI is used
- Controls that exist in the code, not only on paper
- Evidence ready for auditors and customers
- Safer, more trustworthy AI products
guides on ai governance & eu ai act readiness
04 / FAQ
Questions about AI governance & EU AI Act readiness.
Does the EU AI Act apply to companies outside the EU?
It can, when an AI system is placed on the EU market or its output is used in the EU. Your legal counsel should confirm scope; we engineer the technical measures.
Are you lawyers?
No. We are engineers. We work with your legal and compliance teams and implement the technical controls, testing and documentation they need.
What is ISO/IEC 42001?
An international standard for AI management systems. We help put the technical processes in place that support certification, such as inventories, risk assessment, monitoring and documentation.