What We Offer
Our Services
From EU AI Act deadline to full AI governance. We classify your AI systems, check individual tools for compliance, and generate tailored policies. Fast, transparent, and at fixed prices.
EU AI Act Classification Report
Every company using AI must classify its systems under the EU AI Act: Minimal Risk, Limited Risk, High Risk, or Unacceptable Risk. Our classification report delivers a complete inventory: risk categorization, compliance status, and concrete recommendations.
- Questionnaire-based inventory of all AI systems
- Systematic risk classification per EU AI Act
- Compliance status per system (compliant / action needed / critical)
- Prioritized remediation roadmap
- Executive summary for management
AI Tool Compliance Cards
For every AI tool your organization uses, we create a 2-page compliance card: data flows, regulatory mapping, risk assessment, and a clear recommendation: approve, restrict, or reject. No meeting required.
- Data flow analysis per tool (where does your data go?)
- Regulatory mapping (Swiss DPA, EU AI Act, FINMA)
- Risk assessment (High / Medium / Low)
- Clear recommendation: Approve / Restrict / Reject
- No meeting required, you receive the result directly
AI Usage Policy
Your organization needs an AI policy, but not a generic template. Based on your industry, company size, and regulatory exposure, we create a tailored, ready-to-deploy AI usage policy.
- Industry-specific customization (finance, healthcare, manufacturing, etc.)
- Coverage: Swiss DPA, EU AI Act, FINMA where relevant
- Includes: Acceptable use, data classification, approval process
- Ready to deploy, no weeks of consulting
AI Policy Analysis
Are your policies ready for EU AI Act and FINMA? Our tool-assisted analysis compares your existing AI governance documents against current regulatory frameworks to identify gaps, missing controls, and outdated provisions.
- Tool-assisted gap analysis against regulatory frameworks
- FINMA Guidance 08/2024 control-area mapping
- EU AI Act compliance assessment
- Prioritized remediation roadmap
- Executive summary with risk scoring
Shadow AI Compliance Check: Three Tiers
Ready for EU AI Act, FINMA, and Swiss data protection law? We inventory all detectable AI tools, map your compliance status, and deliver a prioritized roadmap, honest about limitations, with amnesty program for maximum visibility.
What We Can Detect
- • OAuth-connected AI apps (via Entra/M365)
- • AI browser extensions (via endpoint inventory)
- • AI domains in DNS/firewall logs
- • AI subscriptions in expense reports
- • Voluntarily disclosed tools via amnesty program
What Remains Invisible Without Advanced Infrastructure
- • Personal device AI usage
- • Mobile AI apps (without MDM)
- • Browser-based AI in personal profiles
- • AI embedded in other SaaS (Notion AI, Slack AI)
Compliance Check
For organizations with endpoint management and extended logging. The optimal cost-benefit ratio for full compliance assessment.
- Expected discovery rate: 40-60%
- 35 hours analysis + consultation
- Browser extension inventory (via Intune)
- Expense report analysis
- Amnesty with department-level reporting
- Customized AI policy
- Infrastructure gap analysis
Compliance Check Plus
For organizations with mature security infrastructure. Maximum visibility, full compliance mapping, and board-ready reporting.
- Expected discovery rate: 60-80%
- 50 hours analysis + consultation
- Developer tool audit (Copilot, Cursor, MCP)
- SaaS discovery via CASB/proxy
- Data flow mapping
- FINMA/EU AI Act compliance mapping
- Board-ready presentation
- 90-day check-in call
Continuous Monitoring
Phase 2The check gives you a snapshot. The retainer keeps you current. The AI landscape evolves fast: new tools, new regulations, new risks. We support you quarterly with updated inventory, compliance review, and prioritized roadmap.
Included as standard in every proposal. You decide whether to continue.