The 38 Annex A controls don't change between clients. Neither does the Annex IV structure or the Article 27 element list. Only the facts change — yet every engagement opens with the same 40 hours of drafting before anyone reaches the advisory work the client is paying for.
We are the artifact layer under your brand, on a monthly partnership. Your template, your naming, your sign-off. Your client never needs to know we exist.
20 minutes · No prep · Straight to the founder
Most firms start with a single white-label engagement to see whether the work holds up. Almost all of them move to a partnership once it does, because the economics only make sense when you stop selling us internally every time.
One client, one artifact set, delivered in your format. You know your margin before the proposal goes out.
Unlimited artifact generation across your client book. Stop pricing us into every proposal and start treating it as capacity you have.
Partnership pricing depends on your client volume and turnaround needs, and is fixed in writing before it starts. Most firms run one paid engagement first — we'd rather you saw the work than took our word for it.
Over 60% of corporate legal teams expect to rely less on outside counsel, and firms without a demonstrable AI capability face structural disadvantage. But ISO 42001 is barely two years old — the hiring pool is thin, and even experienced ISO 27001 consultants will tell you they're still learning this standard.
Clients pay for judgment. The engagement opens with weeks of document production that gets written off or billed at a rate that makes clients uncomfortable.
A client asks for AI compliance support and the honest answer is capacity, not capability. That's revenue walking to a competitor with a spare associate.
Lead implementer training runs $2,000–$5,000 per person and takes months. Meanwhile the client wanted an answer last quarter.
Certification guidance is blunt: pre-written templates with a name dropped in won't satisfy an experienced auditor. If it carries your firm's cover page, that finding lands on you.
Your client never needs to know we exist, and we're contractually fine with that. We work to your template, your file naming, your house style.
The relationship, the scope and the fee are yours. We're not in that conversation unless you want us there.
Structured intake on the client's AI systems, jurisdictions and current state. One call plus a form.
Fitted to the client's systems, delivered in your format with your naming conventions.
You apply judgment, adjust for the client's risk appetite, put your name on it. One revision round included.
Fixed fee agreed before work starts, so you know your margin before you quote your client.
A director at a European consultancy was reading AIMS-06 and noticed it referenced treatment actions by identifier — TRT-001 through TRT-016 — without describing what any of them were. He was right. If you're putting your firm's name on our work, you should see how we behave when we get something wrong.
We audited the whole set and found two more defects he hadn't spotted. Four risks with no treatment action at all. Two SoA back-links that didn't reconcile with the treatment plan. An auditor tracing controls would have raised both as findings.
We rebuilt the documents, shipped v2.3 free to every existing customer with a written explanation, and published the account with the control IDs so anyone can check it.
Read the full changelog →Our buyers so far are a Tokyo IP firm, a European consultancy, and a certification body — organisations whose own reputation depends on the documentation holding up.
Book a free 20-minute call →Only if you tell them. White-label engagements are delivered in your template with your naming conventions. We don't contact your client or reference them anywhere. The client relationship is yours and we have no interest in it.
No, and we'll put it in the agreement. Our buyers are firms — a firm that suspects its supplier is circling its clients stops being a buyer. We take no client relationships from engagements delivered under your brand.
Two ways. Single engagements are fixed-fee, agreed in writing before work starts, so you know your margin before you quote your client. Firm Partnerships run $2,000–5,000/month for unlimited white-label generation across your client book — the rate depends on volume and turnaround, and is fixed before it starts.
Most firms run one paid engagement first. We'd rather you saw the work than took our word for it.
Engagements are led by the founder with specialists brought in per engagement across AI research, security, compliance and technical domains. You're told who is working on your engagement before it starts. We are not a law firm and not an accredited certification body — the professional judgment and the sign-off remain yours.
One revision round is included in every engagement. And when we get something wrong we correct it in public, with control IDs, as the changelog above shows.
Yes, and sometimes you should — from $199. Buy the toolkits if you have associate time available to adapt them properly. Book a call if you have a client deadline and no capacity.
Twenty minutes on how white-label works, what it costs, and whether it fits how your firm delivers. If it doesn't, we'll say so.
Book a free 20-minute call →20 minutes · No prep required · Straight to the founder · No obligation