top of page

Do you know where your team stands with AI Compliance?

Aug 26
3 min read

Updated: Sep 2



AI Compliance Readiness Review


Know exactly where you stand on the EU AI Act and ISO 42001, and what to do next.


An AI compliance readiness review is a structured assessment of how your organisation governs the AI it uses. We map your obligations under the EU AI Act and ISO/IEC 42001, show you where the gaps are with a clear red/amber/green picture, and hand you a prioritised 30/60/90-day plan. No jargon, no scaremongering, just an honest read of where you are.


Why it matters?


You're using AI. But do you have to comply with the EU AI Act? If the output of any AI system you provide or deploy is used in the EU, you do, wherever you're based. The UK is no exception. Non-compliance now carries financial penalties, and ISO/IEC 42001 is fast becoming the standard that clients, investors and partners expect. The question is simple: could you prove where you stand today? Most teams can't. That is the gap the Review closes.


Who is this for?


The Review is for any organisation using AI that wants confidence in where it stands. That includes teams just starting to think about governance, teams part-way through, and teams who have already built something and want to pressure-test it before an audit, a client due-diligence request, or certification. You don't need to be behind to benefit. You need to want a clear, honest picture.


Situations we hear all the time:


"I couldn't tell you where we stand." You get a clear red/amber/green picture against the EU AI Act and ISO/IEC 42001, with every gap named and ranked.


"I'm not sure what applies to us." We map real obligations to how you actually use AI: what's relevant, what isn't, what's urgent, so you stop chasing the wrong things.


"It feels too big to even start." You get a proportionate 30/60/90-day roadmap of what to do first, next and later, with follow-ups that are easy to implement.


What the review includes:


  • Discovery session

  • Processes review

  • AI use-case mapping

  • Red/amber/green (RAG) gap assessment against EU AI Act and ISO/IEC 42001 readiness themes

  • Written findings report

  • 30/60/90-day action roadmap


What you walk away with:


  • A readiness report you can take to your board

  • A prioritised, ranked gap list

  • A red/amber/green maturity snapshot

  • A 30/60/90-day roadmap

  • Clear options for what comes next, if anything


Why veritas_fox


Decades of experience. Our team has decades of combined experience working in operations and data for startups and larger organisations, covering exactly the governance and quality demands the AI Act places at its core.


Certified and audit-experienced. We are certified implementers in ISO/IEC 42001, with hands-on experience running ISO 27001 certification and other certifications inside live businesses.


Built by operators. We've sat in the seat where compliance actually lands, so the advice is practical and proportionate. Our read on the Act is current too, including the Digital Omnibus that moved the high-risk deadlines to December 2027 and August 2028, so you plan against today's rules, not last year's.



FREQUENTLY ASKED QUESTIONS


Does the EU AI Act apply to my business if I only use AI tools?


Almost certainly. If your team uses AI in a professional capacity, you are a "deployer" under the Act and obligations apply, even if you never built the tool and even if you're based outside the EU, provided your AI output is used in the EU.


I already have some AI governance in place. Is the Review still worth it?


Yes. It works just as well as a pressure-test of what you have built as it does a starting point. Plenty of teams use it to validate their position before an audit or a client's due-diligence questionnaire.


Do I need to be pursuing ISO 42001 certification?


No. The Review is about understanding your position first. Certification is an optional later step, not a prerequisite.


How long does it take?


It's designed to be flexible: one to two stakeholder sessions plus a document review, delivered remotely, with written findings.


Is this legal advice?


No. It's a governance and readiness review that gives you an informed, practical basis for your own decisions.



LET'S TALK


Start with a free, no-obligation intro call. We'll explain how the Review works and whether it's a fit.

AI compliance made easy.

Comments


bottom of page