The service
Four ways to work together, from a single conversation to an ongoing relationship. Every engagement is scoped in writing before it begins.
How we work together
Four ways to work together, scoped in writing before any engagement begins. Where remediation follows an assessment, it is scoped and priced as separate work.
We begin with the business: the area of work you want to examine, what it serves, and which standards are relevant given your sector and what you are trying to achieve. From there we define a single operation and work through how it actually runs — the steps, who is involved, what data moves, and where AI sits within it. The session establishes whether an assessment would tell you something you do not already know.
The same operation, examined in full. Each applicable standard is worked through in turn: what evidence exists, what does not, and a recorded professional view on each — including where a standard does not apply to you. The output is a documented position on that piece of work, with the next steps it points to.
Your AI-touched work across the business — and the organisation-level questions a single workflow never reaches: policy, accountability, incident handling, supplier arrangements. Produces a prioritised roadmap and a readout written for a board.
The record is kept current. New AI use is examined as it arrives rather than at the next review; obligations with future commencement dates are tracked and worked through before they take effect; and where a decision comes up — a new tool, a supplier change, a client's questionnaire, a specialist you are considering appointing — there is someone who already knows your position and can advise on it.
The introductory session indicates what an assessment would surface. The review establishes what is actually in place, and records a professional view of it.
What an engagement can be oriented around
Every engagement examines what applies to you. Where a client has a specific objective in view, the assessment can be grouped around it.
Sector-specific standards apply where relevant — including for legal practices, financial services and insurance broking, where regulatory expectations of AI use are already explicit.
Winning and keeping contracts
The standards that appear in client due-diligence questionnaires, tenders and supplier assessments — what documented answers exist today, and what would need to be in place to answer them properly.
Preparing for what comes into force
Obligations with a stated commencement date, and what they will require of your existing AI use.
Introducing AI for the first time
Policy, inventory, approval routes and oversight, established before use spreads rather than after.
Preparing for certification
The evidence an accredited body will expect to see, established before an audit begins.
Protecting confidential client material
Where sensitive material reaches AI systems, under what agreements, and with what controls.
Risks nobody is asking about
Dependency, fallback, single points of knowledge, and whether anyone is measuring whether it works. No regulator will raise these. They surface when something fails.
Remediation
Where an assessment identifies an operational gap, we can carry out the work to close it. Remediation is scoped and priced as separate work, following the assessment that identified it.
AI governance operating model
Roles, decision rights, approval thresholds, escalation — and how it connects to the governance you already have.
Human oversight design
Where a person sits in the workflow, what they check, whether they can actually say no, and how it is evidenced.
Acceptance criteria and measurement
What "working acceptably" means, agreed before rollout, with the means to know whether it still is.
AI policy and inventory
What is genuinely in use, including what nobody has declared — and a policy people can read in five minutes.
What must go to someone else
Where a gap needs a qualified professional or an independent body — a data-processing agreement, a certification audit, penetration testing, a bias audit — we say so plainly and describe the kind of specialist required.
Any specialist we point you toward is named on merit alone. Ignivara iQ holds no vendor relationships and receives no referral income. The selection and the due diligence are yours. Independence is the reason our findings are worth having.