Skip to content
Book a review

Platform · With our people

Forward Deployed

When the case needs a person. Our specialists work alongside your team on the hardest cases. The platform does the scale; the team does the judgement.

When the case needs a person

Most organisations scope AI Act compliance as a one-time exercise. It isn't one. Article 72 requires continuous post-market monitoring of high-risk systems, and regulators want evidence that monitoring happened, that incidents were found and handled, and that the record can't be rebuilt after the fact.

Each one is named, scoped and time-boxed. If none fits, we'll say so.

Two to four weeks

TRACE Readiness Assessment

For organisations preparing for the AI Act's high-risk duties or an FCA s.166 review, or sizing their gap before committing to a programme.

Triage
Every AI system in scope, shadow deployments included.
Rate
Each system against the AI Act and the regimes it overlaps: UK GDPR, FCA Consumer Duty, DORA, MHRA, NIS2, using our regulatory map.
Architect
A gap report and a roadmap with named owners, sequenced against your deadlines.

What you get

  • A documented AI inventory in a format you can maintain.
  • A risk classification for every system, with the reasoning recorded.
  • A gap report against the regimes you're exposed to.
  • A 6–12 month roadmap with sequenced workstreams, dependencies, and rough internal effort estimates.
  • A board-ready summary deck.

What you don't get

  • Implementation.
  • The Readiness Assessment ends with the roadmap.
  • If you want us to execute against it, that's the Implementation Programme, scoped separately.
  • You can also execute internally or with another partner; the deliverables are designed to be portable.

Who it isn't for

  • Organisations with fewer than 10 AI systems in production.
  • Organisations without an existing compliance or risk function to receive and operate the output.
  • Organisations looking for an audit certificate; this is a readiness assessment, not a conformity assessment.

Eight to sixteen weeks

TRACE Implementation Programme

Control
The AI register, Article 9 risk management, Article 10 data governance, Article 11 documentation, Article 14 oversight.
Evidence
Post-market monitoring with tamper-evident logging, patent pending.

What you get

  • A live AI register with classification, ownership, and lifecycle tracking.
  • A documented risk management system that meets Article 9 requirements.
  • Data governance procedures aligned with Article 10.
  • Technical documentation templates for each high-risk system, with worked examples.
  • Post-market monitoring infrastructure with cryptographic evidence capture.
  • Incident reporting protocols.
  • Staff training materials for AI literacy under Article 26(2) and Article 4.
  • A handover pack that lets your team operate everything we built without us.

What you don't get

  • A SaaS subscription.
  • The Standard Intelligence platform is licensed separately for organisations that want the monitoring infrastructure as ongoing software.
  • The Implementation Programme can deploy it, but the licence is a separate commercial arrangement.

Who it isn't for

  • Organisations that haven't completed a readiness assessment.
  • Without a triage and gap analysis, implementation starts in the wrong place and runs over budget.
  • We'll do a Readiness Assessment first, every time.

An ongoing retainer, six months minimum

Fractional AI Officer

One to two days a week, named as the accountable individual for AI governance: board reporting, regulator-facing representation, monitoring oversight, procurement review.

What you get

  • A named, credentialled individual on your governance documents.
  • Board papers and regulator-facing materials produced to a standard that survives scrutiny.
  • A continuous improvement programme that keeps your AI governance current as regulations evolve.
  • Direct access for your compliance, legal, and engineering teams.

What you don't get

  • A full-time hire.
  • Fractional means fractional.
  • Decisions that require continuous presence (incident response in the first 24 hours, for instance) need an internal owner; we build that capability, we don't substitute for it.

Who it isn't for

  • Organisations with fewer than 25 AI systems in production.
  • Organisations without internal compliance, legal, or engineering capacity to operate alongside a fractional engagement.
  • Organisations that want a name on a chart without the underlying work; we're happy to recommend others if that's the brief.

Across the platform

Across the Platform

AI Intelligence Centre

The record of every AI system you run.

See AI Intelligence Centre

Integrity Engine

Keeps a certified system certified as it changes.

See Integrity Engine

AI Literacy

Proves the people running it are trained.

See AI Literacy

Your next step

Which of the Six Apply to You?

Book a 30-minute review