The challenge
Most organisations we meet don't lack AI ideas — they have an oversupply. Proposals come from leadership, IT, the business and vendors. Far fewer have a shared view of what to prioritise, who owns the risk, or which obligations the EU AI Act places on their specific use cases.
Meanwhile, accountability keeps arriving. AI literacy for staff using AI is already mandatory, transparency obligations apply, and high-risk obligations follow despite deferred deadlines. Deferring governance is an active choice — with a price.
Our approach
We work in three steps:
- Mapping. We inventory ongoing and planned AI use, assess it against the Act's risk tiers and your sector's regulations, and identify where business value is greatest.
- Prioritisation and policy. We prioritise the portfolio against value and risk, and write an AI policy that is alive — short enough to be read, concrete enough to be followed.
- Governance and literacy. We establish roles, decision paths and review cycles, and build an AI literacy programme tailored by role: leadership, developers, operations.
A typical engagement starts with leadership priorities and is delivered within 6–10 weeks depending on organisational size. You always get written recommendations with reasoning — independent, beholden to no vendor.
Frequently asked questions
What does the EU AI Act require of us today?
Obligations have been phased in since February 2025: prohibited practices apply, and AI literacy must be ensured for staff working with AI. Transparency obligations for generative AI have applied since August 2026. High-risk system obligations have been deferred to December 2027 and August 2028 — but preparation takes time and starts with mapping. We help you sort out what applies to your specific business.
Can we start with governance and do strategy later?
Yes. Many clients start with mapping and an AI policy to get control of what is already happening in the organisation, then build the strategy on top. We adapt the approach to your maturity.
Is this a report or something more?
Something more. The strategy work is delivered as a decision package with prioritised initiatives, cost and value estimates, and a governance model you can start using next week. No forty pages gathering dust.