AI risk management that truly moves your team forward
Implement the EU AI Act, ISO 42001 and prEN 18286 with confidence – we facilitate the analysis and build the capability within your team.
EU AI Act = the European Union’s AI regulation, which sets requirements for AI systems depending on their risk classification. ISO 42001 = the international standard for AI management systems. prEN 18286 = a draft European standard (prEN) specifically for high-risk AI systems.
Where does your system stand under the EU AI Act?
From uncertainty to clarity
Our approach: from risk analysis to audit readiness
An AI system brings different risks than classic technology – and different documentation obligations. Our approach connects three levels: capturing risks concretely, embedding them in a robust management system, and training your team to carry the process forward on its own.
Catching risks before they get expensive
We facilitate AI Blueprint Camps – structured workshops where your team systematically integrates, captures and assesses AI features, even without any prior AI experience. AI compliance by design, no different from security by design or safety by design. Participants are usually developers, subject-matter owners and quality management working together, because AI risks emerge at the intersection of these perspectives. The foundation is established methods, consistently carried over to AI systems – not reinvented, but adapted.
A management system, not isolated measures
Individual workshops solve individual problems. For the results to carry across multiple AI systems, we also look at the bigger picture: a management system built on ISO 42001 that integrates the requirements of the EU AI Act and prEN 18286 instead of satisfying them separately. That doesn’t create an extra layer of bureaucracy – it creates a repeatable process you can apply to every new AI system without starting from zero again.
Preparing for high-risk requirements
For AI systems that fall into the EU AI Act’s high-risk category, prEN 18286 adds further, more specific requirements. We check early on whether your system falls into this category and align your documentation so it holds up against this standard too – instead of patching it right before an audit.
So your team becomes self-sufficient
For the transition from facilitation to independence, we train your team directly on its own projects – including our Excel-based working materials for structured system risk assessment. The goal is always for your team to be able to apply the approach to further AI systems on its own, after our joint project ends.
Classic experience, translated into AI expertise
FMEA, HARA and TARA have proven themselves over decades across startups, mid-sized companies, global corporations and public authorities – we consistently carry that same foundation over to AI systems. Complemented by practical experience with current regulation such as the EU AI Act and the Cyber Resilience Act, so risk analysis and compliance evidence fit together instead of being treated separately.