AI Readiness
Know where you stand. Know what to do next.
Knowing about AI regulation and being ready for it are two very different positions. Most organisations have done some scoping, but often do not have a clear picture of where their AI systems sit, what governance is already in place and how to build on it, and a practical plan to reach Minimal Defensible Position and beyond.
The EU AI Act is in force; the UK is shaping its own regulatory path; regulators across the US, Brazil, South Korea and beyond are moving. Clarifying how these frameworks apply to your business, products and AI use cases is a challenge we can help you meet.
Our founder was AI legal lead at a major US technology company before AI was mainstream, and led AI governance as a senior leader at a FTSE 100 organisation. We bring that perspective: not theoretical compliance mapping, but the experience of having built and led governance from inside organisations where the decisions made had real consequences.
What it covers
EU AI Act readiness
We assess how your AI is governed in practice, not just what your documentation says - tested directly against the EU AI Act:
- Governance documentation: Reviewing your AI policies, standards, and procedures for completeness, clarity, and internal consistency.
- Governance structure and ownership: Scrutinising committees, roles, reporting lines, and escalation paths to ensure AI accountability holds up under scrutiny.
- EU AI Act gap analysis: Mapping your AI systems, risk classifications, and controls against the specific obligations of the EU AI Act.
- Governance in practice: Testing whether your teams actually understand what is expected of them and follow those controls day to day.
- Prioritised remediation roadmap: Practical recommendations across structures, policies, and committees to reach your Minimal Defensible Position and build from there.
Need to move faster? We can also supply proven governance templates and hands-on delivery leadership to accelerate implementation.
Responsible AI and non-binding rules
Built for organisations outside the EU AI Act's scope - or those looking beyond strict legal compliance. If your primary focus is markets like the UK, Brazil, or Singapore, our Responsible AI approach navigates the evolving regulatory patchwork where specific AI statutes do not yet apply:
- Proportionate governance framework: A tailored Responsible AI model scaled to how your business actually uses AI.
- Fairness and bias assessments: Targeted testing for higher-impact use cases, such as recruitment and HR decisions.
- Honest transparency: Reviewing what you tell customers, staff, and candidates about your AI use - and whether it reflects reality.
- Practical human oversight: Governance controls and sign-off processes that work in practice, not just on paper.
Tiers & delivery
Three tiers of review, scoped to the depth your situation requires. Each can be EU AI Act aligned, responsible AI aligned, or both. We advise on the right level and alignment before you commit.
| Tier | What it involves | Delivered as |
|---|---|---|
| Snapshot | A high-level health check of your AI governance documents and structure, against the alignment you choose. An initial picture of where you stand and what to prioritise. | Findings summary with prioritised recommendations. |
| Assessment | Document review plus structured interviews. How your AI governance operates in practice, measured against regulatory requirements, responsible AI principles, or both. | Report with findings and recommendations, presented to leadership. |
| Extended review | Broader scope: more of the organisation, more jurisdictions, or more complex governance arrangements. For complex environments or urgent regulatory pressure. Can be mobilised quickly. | Detailed findings report and prioritised remediation recommendations, presented to leadership. |
KYAI
Shadow AI is almost certainly happening in your business. Our KYAI (Know Your AI) methodology - combining proprietary technology with two human layers and an expert regulatory overlay - shows you what AI is actually in use, what data it relies on, and the risk it carries at enterprise and function level, so you can govern what you have before you scale what is next.
Get in contact to discuss KYAI >
AI governance programme
Where a review uncovers gaps - or you already know you need structured governance from the ground up - we build and embed it with you across two clear tiers:
- Essential: The core foundations of an AI governance programme, put in place quickly: covering a tailored AI policy, clear roles and responsibilities, and a practical approval route for new AI use cases.
- Comprehensive: A complete, enterprise-grade AI governance programme: covering governance structures, committee terms of reference, full policies and standards, risk and escalation processes, and board reporting.
Either tier can be paired with tailored AI Training & Workshops or our Leading with AI session for boards.
Our methodology: Diagnose, Design, Deliver, Defend
We guide every build through four structured stages: assessing where you currently stand, designing a proportionate response, supporting practical implementation, and ensuring your position holds firm as regulations and your AI use evolve.
How it fits
AI Readiness is one of three core pillars within our AI governance practice, sitting alongside AI Training & Workshops and Leading with AI for boards. You can commission it as a standalone engagement or combine all three into a comprehensive AI governance programme - with AI Readiness typically providing the practical foundation for everything that follows.
Knowing what you are governing: KYAI
Governance only works when you have clear visibility of what you are actually governing. KYAI (Know Your AI) is our three-layer discovery methodology - pairing proprietary technology with two human layers and an expert regulatory overlay - to uncover both sanctioned tools and shadow AI, and assess the risk they carry at enterprise and function level.