Assurance is not an opinion about your intentions. It is a question about what you can put on a table when somebody asks — and we do not build the systems we are asked to examine.
Every organisation we meet has policies. Very few can produce, at speed, the artefacts that show a decision was actually governed at the moment it was taken.
AI arrives as a feature of something already bought. It is running long before it appears on any register, and the register is the first thing asked for.
Somebody approved this system. Reconstructing who, when, and on what information, two years later, is expensive and rarely convincing.
An assurance report produced by the party that built the system is a marketing document. It will be read as one.
Assurance is not an opinion about your intentions. It is a question about what you can put on a table. Choose an obligation.
Six artefacts. Every obligation on this list draws on the same six, which is why preparing for one of them prepares you for most of the others.
The pattern is consistent across every obligation on this list: inventory is usually partial, and the decision record is usually absent. Those two gaps account for most of the work.
Three engagements, sold independently and architected as one. Start with the question you can name.
Three moves. Two of them are ours, and the one in the middle deliberately is not.
We evaluate the system against what it was claimed to do and against the obligations that apply to you, and we record what the test showed — including where the answer was that no record exists.
Remediation is performed by whoever built or runs the system. We do not take the build work, because taking it would mean the next evaluation is us examining our own hands.
The system is re-examined against the same tests on a schedule, because an evaluation is a statement about a configuration on a date, and configurations move.
Every engagement in this pillar is scoped, fixed-fee and finishes with something you can put in front of somebody else.
Thirty minutes. Pick the obligation you are most likely to be asked about and we will tell you which rows you can already fill.
Book a 30-minute scoping callORVIX · INDEPENDENT AI & TECHNOLOGY ASSURANCE · WE DISCLOSE EVERY COMMERCIAL RELATIONSHIP ON THE PAGE FOR THE SERVICE IT BELONGS TO. WHERE LICENSING IS REQUIRED, DELIVERY IS PERFORMED BY NAMED PARTNERS UNDER THEIR OWN LICENCE.