AI security and compliance: protection, documentation and control of AI systems
We test AI systems for attacks and data leaks, prepare documentation and controls for regulators and auditors, and put filters on model answers.
This category covers technical AI security and compliance preparation: audits for prompt injection and data leakage, guardrails, EU AI Act readiness, GDPR for AI products, internal policies and development for banks and healthcare.
It pays off once AI talks to your customers or handles personal data. One leak or offensive answer costs more than a check. Companies selling in the EU are better off preparing for the EU AI Act early.
We went through ISO/IEC 27001:2022 certification ourselves, so we know what controls and evidence look like to an auditor. We prepare documentation and technical measures. Legal opinions come from your counsel, and certificates are issued by an independent certification body.
Services in this section
- from $7,000 · 4–8 weeksEU AI Act readiness
We put all your AI systems into one inventory, help determine their EU AI Act risk category and build the technical side: documentation, logs, user transparency and human oversight.
Details → - from $7,000 · 3–6 weeksAI security audit and red teaming
We attack your chatbot or agent the way a real attacker would and show what worked. After the report we help you fix the findings and test again.
Details → - from $5,000 · 4–6 weeksAI governance and AI usage policies
We write clear rules your staff actually read: what can go into ChatGPT, which tools are approved and who signs off new ones. Plus an AI system register with an owner for each system.
Details → - from $5,000 · 3–6 weeksGDPR compliance for AI systems
We map which personal data flows through your AI product and build protection into it: masking, retention periods and deletion on request. We prepare the technical part of the DPIA for your DPO.
Details → - from $10,000 · 8–14 weeksAI for regulated industries
We build AI systems that pass security review and compliance: data stays in your perimeter, every agent action is logged, and regulatory rules live in the code, not only in the prompt.
Details → - from $5,000 · 3–5 weeksAI guardrails and output control
We put a layer of checks between the model and your customer. It catches forbidden topics, invented prices and personal data, and hands hard cases to a person.
Details →
All services
Describe the task. The first call is with the founder.
We reply within one business day. 30 minutes to tell you whether it is worth doing and what it costs.