4–8 weeks · $40K–$120K
AI Implementation Sprints
One workflow, fully scoped, built, and shipped to production on a fixed timeline and a published price.
See the sprintService · Governance
Enterprise AI Governance.
Design governance, security, and operating-model readiness so your AI work survives audit and scales without surprises. 4–6 weeks, fixed fee.
The Problem
Your AI work won't survive security review without governance.
Most enterprises ship their first AI system, then security and compliance flag it. No audit trail. No eval framework. Data handling unclear. Vendor risks unmitigated. Now you're rewriting production code to satisfy compliance.
We help you design governance first, so your AI infrastructure is security-ready, audit-ready, and compliant from day one. No rewrites. No surprises.
What's Included
Risk assessment (Week 1): Map your current AI systems, data flows, vendor dependencies, and compliance requirements.
Policy framework (Week 2-3): Design AI governance: vendor selection criteria, data handling policies, audit trails, escalation protocols, role-based access control.
Security review (Week 3): Review your systems against NIST AI RMF, CIS controls, and your compliance requirements (SOC 2, HIPAA, etc.).
Eval infrastructure (Week 4): Design and build eval frameworks so you measure quality, cost, and safety continuously.
Operations manual (Week 5): How to deploy, monitor, and scale AI systems safely. For your ops team and leadership.
Executive briefing (Week 6): AI risks, governance model, and compliance readiness. For your board and CISO.
Pricing
$25,000 – $60,000 depending on scope and system complexity.
$25K–$35K: Single system, basic governance, no specific compliance requirements.
$35K–$50K: Multiple systems, SOC 2 or similar compliance needs, custom eval frameworks.
$50K–$60K: Complex integrations, HIPAA or financial regulation, vendor audit deep-dive, policy evolution consulting.
What You Get
Governance deliverables.
AI Policy Framework
Vendor selection criteria, data handling, audit trails, escalation, RBAC, retention policies.
Risk Register
Current risks, mitigation strategies, compliance gaps, vendor risks.
Eval Infrastructure
Code-ready evals for quality, cost, safety, bias, and compliance.
Operations Manual
Deploy, monitor, scale, respond to incidents. For your ops and leadership team.
Vendor Evaluation Matrix
How to evaluate and compare vendors (Claude, OpenAI, open-weight, etc.) against your requirements.
Executive Briefing
Risks, governance model, compliance readiness. For your board and CISO.
FAQ
Common questions.
Do we need AI governance now, or later?
Now. The worst time to design governance is after you've shipped 5 AI systems and your security team says 'stop.' We help you design governance that scales from day one, before you hit compliance walls.
How long does an engagement take?
Typically 4-6 weeks. We assess your current state, design governance frameworks, build eval infrastructure, conduct security reviews, and deliver an operations manual.
What's included in governance design?
Risk assessment, AI policy framework (vendor selection, data handling, audit trails), security review, compliance readiness (SOC 2, HIPAA, etc.), eval infrastructure design, and executive briefing.
Do you handle SOC 2 or HIPAA compliance?
Yes. We design AI systems to meet compliance requirements. We work with your compliance team and design infrastructure that survives audit.
Can you help with vendor evaluation?
Yes. We help you evaluate AI vendors (Claude, OpenAI, open-weight, etc.) against your compliance, cost, and performance requirements.
What's the output of a governance engagement?
You get: AI policy framework, risk register, eval infrastructure (code-ready), operations manual, vendor evaluation matrix, and executive briefing. Everything to scale AI with confidence.
Also consider
Not sure this is the right shape?
Ongoing · $8K–$30K / month
Fractional AI Engineering
Senior AI engineering bandwidth on retainer when the work is continuous rather than a single fixed-scope build.
See the retainerLet's Build Governance
Design for scale.
Tell us about your current AI systems and compliance requirements. We'll assess and scope the engagement.