Productised. Clear scope. No hourly games.

Five productised packages, priced and scoped openly. Pick the smallest one that gets you to your next milestone — we’ll tell you which it is over email.

2 · AI Governance

Governance programme · ~6–8 weeks · for orgs already using AI
ISO 42001 alignment — Annex A control mapping for your AI Management System
AI Use Policy drafting — tailored to your sector and risk profile
Model Card framework — per-model documentation that satisfies Art. 11 / Annex IV
AI Risk Register setup — connect to existing GRC or stand-alone
ePrivacy / Cookie review optional add-on (often bundled with GDPR scope)
Audit trail setup via ComplianceLint — version-controlled documentation + attestation logs
Deliverable: AI Governance Roadmap + ISO 42001 readiness assessment + policy templates + working audit trail
Get details →

3 · Private AI & Infrastructure

Architecture programme · ~6–10 weeks · for data-sensitive orgs
Private AI strategy & local LLM selection
AI appliance / workstation / server evaluation
Storage & network assessment
RAG knowledge-base design
Vendor-neutral hardware shortlist + TCO model
Deliverable: Private AI architecture blueprint
Get details →

4 · Cyber Compliance (NIS2 + CRA)

Compliance programme · ~6–10 weeks · manufacturing & industrial focus
NIS2 readiness — Directive (EU) 2022/2555; DE: NIS2UmsuCG in force since 2025-09-23; up to €10M or 2% turnover fines
CRA (Cyber Resilience Act) — Regulation (EU) 2024/2847; full enforcement 11 Sep 2027; up to €15M or 2.5% fines
Gap analysis, governance, incident-management review
Product compliance, SBOM disclosure, secure software lifecycle
Vendor risk overlay
Deliverable: NIS2 Assessment Report + CRA Readiness Report
Get details →

5 · Europe Market Entry

Market-entry programme · ~8–16 weeks · for international vendors
EU regulatory review: AI Act, GDPR, NIS2, CRA, CE marking
DACH market assessment + competitor analysis
Partner identification + warm introductions
DACH localisation strategy (DE / AT / CH)
Business development support, 12-month execution plan
Deliverable: Market Entry Roadmap + partner strategy
Get details →

Custom scope

Long-term or multi-package
For long-term, multi-package, or retainer arrangements
Long-term advisory retainers
Multi-package programs
Embedded delivery (1–2 days/week on-site)
Custom regulation scanners
Bilateral programs combining packages
Get in touch →

How sequences work

Most clients move through the packages in an obvious order:

  1. AI Readiness first to figure out where you actually are
  2. Governance or Private AI as the implementation work
  3. Cyber Compliance if NIS2 or CRA specifically applies
  4. Custom retainer if you need ongoing support

You can stop after any package — we don’t lock you in, and we don’t do "implementation surprises" where the scope grows mid-engagement.

Email us. Real answers.

Tell us what you’re trying to do and we’ll tell you what package fits — or whether you need one.

Email us