Defined scope. Documented deliverables.
Every engagement has a specific scope, written deliverables and a fixed fee, agreed after the free 45-minute session.
Shielding Check
For businesses already using an AI system, such as a chatbot, who want to know where they stand.
- AI Act applicability map for 1 AI system
- Your role: provider or deployer, and what it means
- Risk classification and transparency obligations
- The 5 most important gaps, prioritised
- 60-minute results session
- Everything in the Shielding Check
- Full gap analysis against the OWASP LLM Top 10 and the EU AI Act
- AI vendor contract review: liability clauses*
- Remediation plan with cost estimates
- Executive summary for management
AI Management System · ISO/IEC 42001
For businesses that need to prove it formally: to a client, a bank or a certification body.
- AI system inventory and risk classification
- Impact assessment and policies
- Statement of Applicability
- Audit-ready file for certification
- ISO/IEC 27001 within the same scope
Continuous Monitoring
For businesses that want compliance to stay current as their AI evolves.
- Quarterly compliance re-check
- Alerts on regulatory changes that affect you
- Review of every new AI tool before it goes live
- Priority on questions
- What is and isn’t allowed when using AI tools
- Practical scenarios from your sector
- Training certificate for your compliance file
* Contract findings are delivered as a technical risk analysis and validated by a lawyer before any legal use. sphragisAI provides consulting, not legal, services.
Four steps. One seal.
Mapping
Which AI systems you have, your role under the AI Act, your level of risk.
Review
Contracts, data, processes and AI behaviour, checked against OWASP and the AI Act.
Shielding
Clauses, transparency labelling and oversight procedures that close the gaps.
Monitoring
AI and regulation keep changing. We monitor so your compliance stays current.
Independent by design.
An assessment is only as valuable as it is impartial.
- We do not assess systems we helped design or build.
- We have no commercial ties to the technology vendors we recommend.
- We work alongside development teams, not in competition with them.
- Findings are confidential and belong to the client.
Do you know what your AI does when no one is watching?
A free 45-minute session: describe the AI systems you use or plan to use, and get a first picture of your obligations and exposure.
or write to info@sphragisai.com · maria@sphragisai.com