A two-week, fixed-scope review. I inventory where your organization uses AI, assign risk tiers, map each use against EU AI Act, ISO 42001, GDPR and HIPAA requirements, and hand you a prioritized gap list plus a human-oversight plan. It draws on my work founding Thursdai, an AI governance platform. This is operational readiness, not legal advice.