AI Security & LLM Red Teaming
Red-team your LLM applications and AI agents before attackers do, with reproducible evidence.
Learn moreAI
AI Governance & EU AI Act Readiness
AI regulation is moving from principle to obligation. We establish which rules apply to each of your AI systems and in what role, measure where you stand against ISO/IEC 42001 and the EU AI Act, and build documentation in which every claim traces back to evidence.
What we deliver
Scope of work
Every engagement is scoped in writing before it starts. A typical engagement includes:
- EU AI Act applicability and role determination for each AI system
- ISO/IEC 42001 governance readiness assessment with each gap assigned to an owner
- Annex IV technical documentation and Statement of Applicability
- Control-to-clause mapping across ISO/IEC 42001, the EU AI Act and NIST AI RMF
- Crosswalk from an existing ISO/IEC 27001 management system
- Continuous advisory as obligations phase in
What you get
Outcomes
- Clarity on which obligations apply, and from when
- A gap register your leadership can act on
- Documentation that holds up because it is built from evidence
Track record
Experience behind it
- Architect of Cyron AI Compliance, an evidence-first platform for the EU AI Act and ISO/IEC 42001, in development
- Delivered through the Cyron consulting practice alongside AI red teaming
- Public proof-of-concept labs for AI governance mapping and AI code provenance (EU AI Act Article 12)
Technologies and frameworks
Does the EU AI Act apply to companies outside the EU?
It can. The Act applies to providers placing AI systems on the EU market and to deployers in the EU, and to providers and deployers outside the EU where the output of the system is used in the EU. Determining your role for each system is the first step.
What is ISO/IEC 42001?
ISO/IEC 42001 is the international standard for an AI management system. It sets out how an organisation governs the development and use of AI, and it is increasingly used to demonstrate responsible AI practice to customers and regulators.
Are you a certification body?
No. We help you become ready: applicability, gap assessment, controls and documentation. Certification itself is carried out by an accredited certification body.
Related services
Often combined with
AI, Machine Learning & LLM Engineering
Production AI with restraint: LLMs where they add real signal, cheaper methods everywhere else.
Learn moreTechnology Consulting & Fractional CTO
Senior technology judgement on demand, from IoT and hardware integration to fractional CTO and vCISO.
Learn moreHave a system to build, modernise or secure?
Tell us where things stand today. The first conversation is free, and you will leave it with an honest view of the work involved.