AI is already in use. Governance usually isn't.
Staff use generative AI tools every day, often with company or patient data and without anyone having approved them. AI is moving into research, operations and products that regulators already oversee.
EU AI Act obligations are phasing in through 2027 and 2028, including for AI in medical devices. Swiss data protection law already applies to every AI tool that touches personal data, and FINMA expects financial institutions to govern their AI. We help you get ahead of it without slowing down the people who use AI well.
Where to start
The AI Use & Risk Check
A fixed-scope review over 5 to 7 days that tells you where you stand and what to do first.
Fixed price, agreed upfront
Book a callWhat you get
- An inventory of the AI tools in use, including unapproved ones
- Which rules apply to you: nDSG, GDPR, EU AI Act and sector guidance
- A practical AI usage policy for your staff
- Your top risks, ranked, with the actions to address them
Going further
From first check to lasting governance
AI governance framework
Roles, a risk assessment process for new AI uses, AI vendor due diligence and training, mapped to FINMA guidance or ISO/IEC 42001.
ISO/IEC 42001 readiness
An AI management system built to certification standard, a natural step for ISO 27001 holders.
Fractional AI & privacy officer
Ongoing review of new AI use cases and vendors, and a point of contact for regulators, on a monthly retainer.
Leadership workshop
A half-day session for your board or management team on AI risk, regulation and the decisions they own.
Not sure where AI is used in your organisation?
That's exactly what the AI Use & Risk Check finds out. Book a 30-minute call to scope it.