Frequently asked questions

From scale-ups shipping their first AI features to large enterprises and public bodies. We adapt the format and depth of each engagement to your size and maturity.

Mostly remotely, which keeps costs down and allows flexible scheduling. We travel for workshops, executive sessions and incident response when it adds value.

Assessments and projects are usually quoted at a fixed price based on an agreed scope. Retainers are priced per month. You always receive a written proposal before any commitment.

AWS, Microsoft Azure and Google Cloud, as well as Kubernetes, major SaaS platforms and hybrid environments.

No. We are vendor-neutral. We help you get more from the tools you already own and give independent advice when you need new ones.

Yes. Implementation is a core part of our work: we deliver infrastructure as code, policies and pipeline changes alongside your teams.

Yes. Even if you don't build models, you need governance over which tools staff use, what data they share and how AI outputs are relied upon. Many risks come from integration and usage rather than the model itself.

An attack in which malicious instructions are hidden in content an AI system processes, such as a user message, document, email or web page, causing it to ignore its intended instructions, leak data or misuse its tools.

Yes. We assess which of your AI systems are in scope, determine your role and obligations, and build the governance and documentation needed to meet them.

Yes, before any detailed scoping discussion. Confidentiality is standard in all our engagements.

We use dedicated, least-privilege and time-limited access that you control, prefer read-only roles for assessments, and document every access granted.

We keep only what is needed to deliver the work, store it encrypted and securely delete it at the end of the engagement or as agreed contractually.