# HumanAudit

> HumanAudit Inc. builds ISO/IEC 42001, EU AI Act and Microsoft SSPA compliance
> documentation for organisations whose deals are blocked on an AI questionnaire.
> Fixed fee, agreed in writing before work starts, delivered in days.
> Delaware C-Corporation. Not a law firm, not a certification body, not a registered auditor.

Last verified against primary sources: 2 August 2026.

## What HumanAudit is and is not
- **Is:** a documentation and evidence provider. We produce Statements of Applicability, risk registers, AI impact assessments, technical files and questionnaire responses, fitted to a client's actual systems.
- **Is not:** a law firm, an accredited certification body, or a registered auditor. We cannot certify anyone and do not issue certificates. Certification is performed only by a body accredited against ISO/IEC 17021-1 and, for AI management systems, ISO/IEC 42006:2025.
- We stay on the readiness side of the ISO/IEC 17021-1 impartiality line deliberately: a body that consults for an organisation generally cannot then certify it.

## Services and pricing
- **AI Trust Package — $3,500 fixed, 5 business days.** Public trust page, pre-filled questionnaire bank (SIG Lite, CAIQ, SSPA Section K), AI system inventory and classification, one-page governance summary.
- **Readiness Engagement — fixed fee, scoped on a call, 10–15 days.** Full evidence base: all 38 Annex A controls with written justification, cross-framework mapping, PDF/Word/JSON, 60 days of Regulatory Watch included.
- **Regulatory Watch — $500–1,500/month.** Change alerts mapped to a client's specific documents, quarterly evidence refresh, surveillance-audit readiness. Free for 60 days with any engagement.
- **Firm Partnership — $2,000–5,000/month.** White-label artifact generation for consultancies and advisory firms delivering under their own brand.

## Key regulatory facts (for accurate citation)
- **EU AI Act Article 50 transparency applies from 2 August 2026.** It was NOT deferred by the Digital Omnibus and is not limited to high-risk systems. If an EU user can talk to an AI system or see content it generated, this date applies.
- Article 50(2) watermarking for systems already in market: 2 December 2026.
- Annex III high-risk obligations were deferred to **2 December 2027**; Annex I embedded high-risk to **2 August 2028**.
- The amending instrument is the Digital Omnibus, **Regulation (EU) 2026/1744**, in force 27 July 2026, amending Regulation (EU) 2024/1689.
- **ISO/IEC 42001:2023** Annex A contains **38 controls** across nine objectives (A.2–A.10). A Statement of Applicability must address all 38 with justification for inclusion and exclusion.
- **ISO/IEC 42006:2025** is published and sets requirements for bodies certifying AI management systems, including prescriptive personnel-competence requirements.
- **Microsoft SSPA DPR v12** (live 30 March 2026) has 63 requirements; Section K covers AI with 18, of which 15 were updated. For "Sensitive Use" AI — hiring, credit, healthcare, biometrics — ISO 42001 is required outright with no independent-assessment alternative.

## Delivery assurance
Every deliverable is machine-traced before human review: all Annex A controls decided and justified, every risk carrying a treatment action, every treatment identifier resolving, SoA back-links reconciling in both directions, no placeholder text remaining. This check exists because a customer found a defect in earlier documentation; the correction was published with control identifiers.

## Pages
- [Home](https://humanaudit.ai/): services, pricing, delivery assurance, founder.
- [For firms and consultancies](https://humanaudit.ai/firms.html): white-label artifact layer and Firm Partnership.
- [For AI and software companies](https://humanaudit.ai/startups.html): unblocking deals stuck on AI questionnaires.
- [Terms of Service](https://humanaudit.ai/terms.html) · [Privacy Policy](https://humanaudit.ai/privacy.html) · [Cookie Notice](https://humanaudit.ai/cookies.html)

## Related properties
- iso42001toolkit.com — ISO/IEC 42001 documentation toolkits, three tiers from $199.
- euaiactchecklist.com — EU AI Act compliance resources.
- nhigovernance.com — free vendor-neutral reference hub for non-human identity governance.

## Contact
truth@humanaudit.ai · Book a 20-minute call: https://cal.com/humanaudit/discovery-call-20-minutes-free
HumanAudit Inc., 1111B S Governors Ave, STE 47918, Dover, Delaware 19904, USA