AI governance · EU financial services
Find out which AI obligations apply, how your controls measure up and what to do next — using the policies and system records you already have.
Two views · one evidence base
Assessments
Pick one or combine them. Need wider support? ENFTC also covers technology risk, cyber security and DORA — see all services.
Your role under the Act, obligations mapped to your AI systems and processes, and a gap assessment against the evidence — including relevant amendments.
Governance, policy, risk processes, roles and documentation reviewed against the standard, with a prioritised plan to prepare for independent certification.
Internal audits of an established AI management system — plan to corrective-action verification — scoped separately.
Deliverables
Scope, deliverables, input from your team and fee are agreed before you commit.
AI systems, obligations, evidence sources and decisions in scope — confirmed in writing.
What is in place, what is not, and the limits of the evidence behind each statement.
Each linked to the obligation or risk it affects, with an owner and a next step.
Sequenced actions with dependencies and relative effort made explicit.
Scope, posture and evidence limits in one assessment report.
Findings and plan walked through with the people responsible for delivery.
Complete on its own. Remediation and re-testing against fresh evidence are separate, optional follow-on work.
Approach
The decision to support, AI systems and obligations in scope, your team's input and the fee — in a written scope note.
Confidentiality, access and permitted AI-tool use agreed first. Then I start from what you have and ask owners only about gaps.
Each view against its own criteria — AI Act roles and obligations, 42001 readiness (not certification).
I review and approve every finding, then present the report and a walkthrough of the sequenced plan.
ENFTC's consultant workbench organises policies, system information and evidence so less time goes on document handling and more on the decisions that matter. It also drafts proposed changes to your own policies, which I review section by section before they reach you.
You work directly with me throughout. I approve every conclusion, explain the evidence behind it and help turn priorities into action.
Describe the AI system, the decision you need to make and any deadline. You'll get a proposed scope, the input needed and a fee before you commit.