Services

Eight advisory offerings across ISO 42001 and EU AI Act.

Two flagship advisory lines, one delivery register. ISO 42001 engagements are fixed-scope, 2–3 months, anchored by conceptual engineering methodology. EU AI Act engagements are AIMS-first — Annex III gap assessment, conformity roadmap, and recurring surveillance — each ending in a board-level register or report that survives August 2026 enforcement. Whether you arrived from /advisory/iso-42001 or /advisory/eu-ai-act, every card below is a packaged offering into the same advisory intake.

ISO 42001

01

AI Policy + Annex A Gap Analysis

A fixed-scope review of your existing AI policy stack against ISO/IEC 42001 Annex A controls and the clauses the standard expects an AIMS to satisfy. We produce a written gap report mapping each Annex A control to the policy text, code, or operational artifact that currently satisfies it — and to the conceptual engineering work the standard does not cover but an AIMS relying on the Annex A controls will be exposed by.

Target buyer ISO 27001 holders seeking an AI governance cross-sell — organizations that already run an ISMS and want a single defensible bridge into ISO 42001.
Engagement shape Fixed scope · 2–3 months · board-level gap report + Annex A control map.
Enquire
02

AI Impact Assessment

An AI-system-level impact assessment built on the conceptual engineering methodology applied to the AI Act’s fundamental-rights impact model. We identify the affected stakeholders, the concepts your system implicitly relies on (fairness, harm, robustness), and the conditions under which each concept is satisfied — producing a defensible assessment you can submit to procurement, regulators, or an internal ethics review.

Target buyer AI deployers in regulated sectors — financial services, healthcare, employment, education, and any high-risk classification under Annex III of the EU AI Act.
Engagement shape Fixed scope · 6–10 weeks · formal AI Impact Assessment report with concept map and mitigation register.
Enquire
03

Lifecycle Traceability

A traceability engagement that maps the events your AI system generates across its full lifecycle — training data provenance, training runs, evaluation, deployment, inference, post-deployment monitoring — onto the logging and record-keeping requirements of EU AI Act Art. 12 and ISO 42001 Annex A.6.3. The deliverable is a logging architecture and an event schema your engineering team can implement, plus a verification procedure an auditor can run.

Target buyer Operators of high-risk AI systems preparing for Art. 12 (Logging) and Art. 72 (Post-market monitoring) compliance — typically organizations with one or more production AI systems exposed to regulated use cases.
Engagement shape Fixed scope · 2–3 months · event schema + logging architecture + auditor-facing verification procedure.
Enquire
04

Third-Party AI Diligence

A diligence engagement for teams evaluating an AI vendor or acquiring an AI-driven product line. We interrogate the conceptual foundations of the vendor’s claims — what their accuracy, robustness, fairness, or explainability statements actually mean, and whether the conceptual work required to make those statements load-bearing is present. The output is a written diligence report with a clear go / conditional-go / no-go position independent of vendor self-attestation.

Target buyer Enterprise procurement teams, corporate development, and investment diligence evaluating AI vendors or AI-heavy acquisitions.
Engagement shape Fixed scope · 3–6 weeks · written diligence report with go / conditional-go / no-go position.
Enquire

EU AI Act

05

Annex III Gap Assessment

An Article-by-Article Annex III readiness assessment with a prioritized remediation backlog. We map your production AI footprint against the Annex III high-risk categories, identify the conformity obligations each system already satisfies and the ones it does not, and produce a written gap report plus a sequenced remediation playbook your team can execute before August 2026 enforcement.

Target buyer Organizations with no formal AI governance posture — teams approaching the EU AI Act for the first time and needing a defensible baseline before any implementation work begins.
Engagement shape Fixed scope · 6–8 weeks · $40K — $75K · gap-report deliverable + remediation playbook.
Enquire
06

EU AI Act Implementation Roadmap

An Article-by-Article conformity roadmap with an AIMS overlay, harmonizing with the ISO 42001 control set if you hold (or are building) one. We translate the Annex III and Annex IV obligations into an indexed conformity register your team can execute against, with each Article mapped to the AIMS evidence the regulator and any notified body will expect at conformity assessment.

Target buyer AI deployers in regulated sectors with production high-risk systems — financial services, healthcare, employment, education, and biometrics — preparing for Annex III enforcement.
Engagement shape Fixed scope · 3–4 months · $90K — $180K · Article-indexed conformity register + AIMS overlay.
Enquire
07

Ongoing Compliance Monitoring

A recurring surveillance posture: substantial-modification detection, post-market monitoring under Art. 72, conformity register maintenance, and audit prep ahead of each annual surveillance cycle. We treat conformity as an operating discipline rather than an annual event — keeping the Article-by-Article register current as models ship, vendors change, and Member-State implementing rules land.

Target buyer Organizations already through initial readiness work and in operational mode before Aug 2026 — teams that need a steady partner for the recurring conformity load, not a point-in-time assessment.
Engagement shape Recurring engagement · annual cycle · $80K — $160K / year · conformity register refresh + surveillance audit prep.
Enquire
08

Pre-Aug-2026 Readiness Sprint

A compressed 10-week sprint: AIMS-first, Annex III overlay, audit rehearsal. We start from wherever your AIMS is — non-existent, partial, or ISO-42001-derived but not Article-aligned — and bring it to a defensible posture against the August 2026 enforcement floor. The deliverable is the AIMS, the Annex III conformity register, and a single rehearsal audit you can present to leadership as proof of readiness.

Target buyer EMEA-based AI deployers with high-risk Annex III exposure that have not begun formal readiness work — teams that need to compress a 6-month program into a 10-week sprint without losing the conceptual layer the Act assumes.
Engagement shape Fixed scope · 10 weeks · $150K — $300K · AIMS + Annex III overlay + audit rehearsal deliverable.
Enquire

Not sure which offering — ISO 42001 or EU AI Act — fits your situation?

Tell us where you are — current AIMS maturity, system in scope, sector exposure, EU AI Act Annex III category if applicable — and we will recommend the right deliverable. We respond from axiom-advisory@polsia.app within two business days.

Get in touch