Governance performance

Obligations met, and proven.

AI governance and assurance, privacy and data governance, and technology due diligence for organizations whose obligations are examined by regulators, buyers, insurers and acquirers.

Above the controls

Every organization we work with carries obligations that sit above its security controls: what it does with personal data, how it uses and supervises AI systems, and what it can prove about its technology when someone is about to buy it or insure it. These are governance questions, and they are answered the same way we answer security questions: observe, fortify, verify, evidence, sustain.

AI governance and assurance

Independent assurance for systems that make or shape decisions.

We review how AI systems are selected, deployed, supervised and documented against ISO/IEC 42001, the NIST AI Risk Management Framework and the obligations in contracts and regulation, and we produce the evidence that boards, customers and regulators now ask for. We run AI systems in production in our own work, which is why our reviews are practical rather than theoretical.

Full service page →

Privacy and data governance

Personal data handled the way the law and your clients expect.

Readiness and evidence for HIPAA, GDPR, CCPA and sector rules: data mapping, lawful basis and consent, retention, vendor data agreements, impact assessments and the controls that make policy real.

Full service page →

Technology due diligence

What a buyer, investor or insurer needs to know, established independently.

Short, evidence-led reviews of a target’s security, infrastructure, data and AI posture for acquirers, investors and underwriters, and sell-side readiness for the firms about to be examined.

Full service page →

Across disciplines

Governance is where security and growth meet.

The practices that must prove their privacy posture are the same practices whose expertise should be cited by answer engines; the firms adopting AI systems are the ones whose own AI use must be governed.

Security → Growth →

Tell us what must be proven.

Discuss a Requirement →