AI Act assurance path
Turn AI Act questions into a workable assurance perimeter for a system, its owners and the markets in scope.
Explore the AI Act pathai-eu-act.xyz / independent cross-border assurance
Evidence-led AI assurance, a customer portal and a clear route to action.
Maison Sasson helps regulated organizations, AI teams, procurement, auditors and boards move from a defined question to scoped delivery, persistent evidence and a defensible next step.
Regulated contexts14-jurisdiction reference matrixEvidence-led scope
Scope before conclusion
A defensible route from obligation to evidence.
Every engagement begins with the system, decisions, dependencies and markets actually in scope. The public catalogue is a reference point, not a universal coverage claim.
14reference jurisdictions
6assurance paths
10commercial offers
03 / Operating capabilities
A commercial offer connected to an evidence workspace.
The service catalogue is backed by a portal and delivery surfaces that make evidence, ownership, history and controlled sharing visible. Availability is always bounded by the selected offer and approved scope.
languages
Languages and reference perimeter
28 canonical language codes are listed in the localization contract; a document is issued only where a verified version exists.
See the reference matrixbilingual documents
Bilingual documentation
English plus the customer-selected language can be scoped through the bilingual-document workflow and its delivery boundary.
Discuss the document scopecustomer portal
Customer portal and workspace
An authenticated dashboard brings scoped work, next steps and authorized delivery into one customer workspace.
Create a workspaceevidence registry
Persistent versioned registry
Documents, evidence, incidents and related records retain versions and scope rather than living only in a one-off report.
Explore Framework Sassonassurance ledger
Sasson Assurance Ledger
Snapshots, sources, checksums and evidence links create a structured assurance record with explicit gaps.
View the demo reportaudit trail
Append-only audit trail
Actor, timestamp, diff and context can remain connected to operational and delivery events within the authorized scope.
Read the methodologyincidents
Incident management
Incidents can carry a responsible owner, linked evidence, state transitions and a recorded resolution; an approval workflow for closure is not claimed.
Request a forensic auditreports and sharing
Reports, exports and controlled sharing
Final reports, PDF/CSV exports and revocable or expiring shares are exposed only through their authenticated and scoped routes.
See the report boundarycommercial boundary
Clear purchase and delivery gates
Published USD terms lead to hosted checkout where configured; gated offers remain request-led and never promise an unavailable payment path.
Compare the full offer04 / Services
All 10 offers, with the route from scope to action.
The full commercial catalogue keeps every offer visible, including audience, deliverables, terms, exclusions and the real next step: checkout where enabled, or a scoped request where a gate remains.
Contract language
The choice stays attached to the purchase. Languages without a verified version remain selectable for a request, but do not allow issuance or acceptance.
- 14 days with no charge and no human consulting included
- Starter limits: 3 AI systems, 2 users, 2 jurisdictions, 50 evidence items
- Baseline, gaps, risks and corrective actions without automated final delivery
Duration
14-day free trial with no charge; monthly plan only when activated.
Updates
Update cadence and content follow the offer scope.
Who it is for
Organizations building an initial AI assurance baseline.
Scope
- • Dynamic questionnaire
- • AI Act, NIST AI RMF, ISO 42001 and NIS2
Deliverables
- • Evaluation draft
- • Preliminary gaps and mitigations map
Purchase and next step
Start with the trial; the paid monthly plan requires verified payment and a formal quality gate.
Delivery gate
No audit-ready export, shareable Passport or final delivery during the trial: verified payment, operational gate and Maison Sasson owner decision are required.
Limits
- • No audit-ready export, shareable Passport or final delivery during the trial: verified payment, operational gate and Maison Sasson owner decision are required.
Exclusions
- • 14-day free trial with no charge during the trial. Paid activation remains subject to subscription reference verification.
Disclaimer
The service is bounded by available evidence and authorizations; it is not certification, regulatory approval, a guarantee of compliance or legal advice.
14-day free trial with no charge during the trial. Paid activation remains subject to subscription reference verification.
A bounded review that turns the AI Act perimeter and available evidence into operational decisions.
$1,800/month
- Human review of scope and evidence
- Priority findings and operational recommendations
- Review outcome kept distinct from the self-assessment
Duration
Monthly contract with no commitment beyond the stated month.
Updates
Update cadence and content follow the offer scope.
Who it is for
Organizations preparing an AI Governance readiness review.
Scope
- • AI Act perimeter and involved roles
- • Evidence, gaps and priority questions
Deliverables
- • AI Governance Readiness Review
- • Priority operational recommendations
Purchase and next step
Request an assessment and enter a monthly USD contract.
Delivery gate
The review is delivered after verified payment and owner authorization.
Limits
- • The review is delivered after verified payment and owner authorization.
Exclusions
- • Monthly USD contract. You may choose not to renew the following month.
Disclaimer
The service is bounded by available evidence and authorizations; it is not certification, regulatory approval, a guarantee of compliance or legal advice.
Request the review
Monthly USD contract. You may choose not to renew the following month.
A bounded technical-forensic audit to reconstruct behavior, evidence and cross-border dependencies.
$5,000/month
- Evidence-led reconstruction of events and system states
- Source, gap and processing-assumption register
- Technical-forensic report with explicit boundaries
Duration
Monthly contract with no commitment beyond the stated month.
Updates
Update cadence and content follow the offer scope.
Who it is for
Incident, legal, governance and technology teams clarifying a disputed outcome.
Scope
- • Agreed systems, registers and evidence sources
- • Defined jurisdictions and time window
Deliverables
- • Evidence-led timeline
- • Technical-forensic report and gap register
Purchase and next step
Request an assessment and enter a monthly USD contract.
Delivery gate
Work remains bounded by the agreed evidence, systems and jurisdictions.
Limits
- • Work remains bounded by the agreed evidence, systems and jurisdictions.
Exclusions
- • Monthly USD contract. You may choose not to renew the following month.
Disclaimer
The service is bounded by available evidence and authorizations; it is not certification, regulatory approval, a guarantee of compliance or legal advice.
Request the audit
Monthly USD contract. You may choose not to renew the following month.
- Growth audit scope
- Assessment of systems, controls and evidence
- Observable improvement roadmap
Duration
Monthly contract with no commitment beyond the stated month.
Updates
Update cadence and content follow the offer scope.
Who it is for
Growing organizations seeking a continuing operational audit.
Scope
- • AI systems and declared controls
- • Operational evidence and growth priorities
Deliverables
- • Growth Audit
- • Improvement roadmap and next steps
Purchase and next step
Registration, recurring monthly checkout and verified payment.
Delivery gate
Delivery remains pending until payment is verified and the owner authorizes it.
Limits
- • Delivery remains pending until payment is verified and the owner authorizes it.
Exclusions
- • Monthly USD subscription.
Disclaimer
The service is bounded by available evidence and authorizations; it is not certification, regulatory approval, a guarantee of compliance or legal advice.
Register and purchase
Monthly USD subscription.
- Multi-organization workspace
- Separate roles and scopes for tenants
- Evidence and deliverables with audit trail
Duration
Monthly contract with no commitment beyond the stated month.
Updates
Update cadence and content follow the offer scope.
Who it is for
Agencies and teams working across multiple client organizations.
Scope
- • Multitenant workspace
- • Scoped membership, evidence and deliverables
Deliverables
- • Use-case assessment
- • Tailored operating proposal
Purchase and next step
2,000 USD/month; request through the public Service Intake while product ID, limits and approvals are verified.
Delivery gate
Configuration stays blocked until commercial approval and regulatory gates exist.
Limits
- • Configuration stays blocked until commercial approval and regulatory gates exist.
Exclusions
- • Monthly USD contract. Checkout is available only after commercial and regulatory configuration is verified.
Disclaimer
The service is bounded by available evidence and authorizations; it is not certification, regulatory approval, a guarantee of compliance or legal advice.
Request an assessment
Monthly USD contract. Checkout is available only after commercial and regulatory configuration is verified.
A structured monthly programme with six governed delivery blocks through month 12.
$1,500per month
Monthly renewal; you may choose not to renew the following month
- Six scheduled delivery blocks within the agreed scope
- Progressive, traceable delivery
- Regulatory control before authorization
Duration
Monthly contract with no commitment beyond the stated month.
Updates
Update cadence and content follow the offer scope.
Who it is for
Organizations requiring a structured, continuing program.
Scope
- • Monthly programme with six delivery blocks
- • Scope and documents governed by the owner
Deliverables
- • Six blocks under the approved scope
- • Traceable delivery status
Purchase and next step
Request an assessment; authenticated checkout remains paused until the provider exposes a verifiable period and subscription reference.
Delivery gate
When supported, server-side verified payment and owner authorization will precede delivery; the approved regulatory catalogue is mandatory.
Limits
- • When supported, server-side verified payment and owner authorization will precede delivery; the approved regulatory catalogue is mandatory.
Exclusions
- • USD 1,500/month. No minimum commitment; you may choose not to renew the following month.
Disclaimer
The service is bounded by available evidence and authorizations; it is not certification, regulatory approval, a guarantee of compliance or legal advice.
Request an assessment
USD 1,500/month. No minimum commitment; you may choose not to renew the following month.
Continuing oversight of the AI perimeter with monthly updates and operational traceability.
$1,500per month
Monthly renewal; you may choose not to renew the following month
- Monthly perimeter update
- Controls and related evidence
- Versioned regulatory register
- Tracked corrective actions
- Incident management and recording
- Activity and decision audit trail
- Management reporting
Duration
Monthly contract with no commitment beyond the stated month.
Updates
Update cadence and content follow the offer scope.
Who it is for
Organizations requiring structured monthly AI assurance oversight.
Scope
- • AI perimeter updated monthly
- • Controls, evidence, incidents and versioned regulatory register
Deliverables
- • Tracked corrective-action register
- • Audit trail and management reporting
Purchase and next step
Request an assessment; no public checkout while the provider does not expose a verifiable period and subscription reference.
Delivery gate
When supported, server-side verified payment and owner authorization will precede delivery.
Limits
- • When supported, server-side verified payment and owner authorization will precede delivery.
Exclusions
- • Does not include unlimited consulting and does not produce automatic certification.
Disclaimer
The service is bounded by available evidence and authorizations; it is not certification, regulatory approval, a guarantee of compliance or legal advice.
Request an assessment
Does not include unlimited consulting and does not produce automatic certification.
Persisted monthly reporting for fleets of one to five agents, with versioned snapshots and verified regulatory sources.
From$500per month, from
Monthly renewal; you may choose not to renew the following month
Fleet pricing · USD/month
1 agent$500
2 agents$900
3 agents$1,200
4 agents$1,600
5 agents$2,000
- One section for each of the 14 canonical jurisdictions
- Immutable monthly snapshot with checksum and version
- Explicit gaps when a source is not verified
- PDF and controlled evidence sharing
Duration
Monthly contract with no commitment beyond the stated month.
Updates
Update cadence and content follow the offer scope.
Who it is for
Organizations governing agent fleets and requiring monthly traceability.
Scope
- • Organization, paid purchase, audit and owner connected
- • Authorized regulatory register
Deliverables
- • Persisted monthly report
- • Downloadable PDF and revocable/expiring shares
Purchase and next step
Request an assessment; checkout remains paused until the provider exposes a verifiable period and subscription reference.
Delivery gate
No completed coverage without authorized, current, effective sources assigned to Agentic.
Limits
- • No completed coverage without authorized, current, effective sources assigned to Agentic.
Exclusions
- • From USD 500/month by agent count. No minimum commitment; you may choose not to renew the following month.
Disclaimer
The service is bounded by available evidence and authorizations; it is not certification, regulatory approval, a guarantee of compliance or legal advice.
Request an assessment
From USD 500/month by agent count. No minimum commitment; you may choose not to renew the following month.
A path limited to the AI Act framework, with a scoped checklist, evidence and gaps.
$750per month
Monthly renewal; you may choose not to renew the following month
- System, role and use perimeter
- Evidence and gap map
- Decision brief and bounded roadmap
Duration
Monthly contract with no commitment beyond the stated month.
Updates
Update cadence and content follow the offer scope.
Who it is for
Organizations examining only their AI Act perimeter.
Scope
- • AI Act only
- • Agreed system, role, use, evidence and gaps
Deliverables
- • AI Act checklist
- • Evidence/gap map and decision brief
Purchase and next step
Request an assessment; checkout remains paused until the provider exposes a verifiable period and subscription reference.
Delivery gate
Delivery depends on the agreed perimeter, available evidence and owner authorization.
Limits
- • Delivery depends on the agreed perimeter, available evidence and owner authorization.
Exclusions
- • USD 750/month for the AI Act-only scope. No minimum commitment; you may choose not to renew the following month.
Disclaimer
The service is bounded by available evidence and authorizations; it is not certification, regulatory approval, a guarantee of compliance or legal advice.
Request the AI Act path
USD 750/month for the AI Act-only scope. No minimum commitment; you may choose not to renew the following month.
A path limited to NIST AI RMF, with selected functions, ownership, evidence and dependencies.
$750per month
Monthly renewal; you may choose not to renew the following month
- Selected Govern, Map, Measure and Manage functions
- Ownership, evidence and dependencies
- RMF map and bounded decision brief
Duration
Monthly contract with no commitment beyond the stated month.
Updates
Update cadence and content follow the offer scope.
Who it is for
Organizations working only on the NIST AI RMF reference.
Scope
- • NIST AI RMF only
- • Agreed functions, categories, systems and context
Deliverables
- • RMF evidence map
- • Decision brief and next checks
Purchase and next step
Request an assessment; checkout remains paused until the provider exposes a verifiable period and subscription reference.
Delivery gate
Delivery depends on the agreed perimeter, available evidence and owner authorization.
Limits
- • Delivery depends on the agreed perimeter, available evidence and owner authorization.
Exclusions
- • USD 750/month for the NIST AI RMF-only scope. No minimum commitment; you may choose not to renew the following month.
Disclaimer
The service is bounded by available evidence and authorizations; it is not certification, regulatory approval, a guarantee of compliance or legal advice.
Request the NIST AI RMF path
USD 750/month for the NIST AI RMF-only scope. No minimum commitment; you may choose not to renew the following month.
05 / AI Governance News
Public intelligence with an explicit evidence status.
Only items with an active HTTPS source and a dated event or publication are shown.
Loading public news…
01 / Assurance paths
Start with the question closest to your system.
NIST AI RMF readiness review
Use Govern, Map, Measure and Manage to structure a practical review with accountable owners.
Review readinessISO 42001 management-system review
Examine policies, responsibilities and continual-improvement evidence around an AI management system.
Request a system reviewNIS2 resilience and control review
Trace how AI dependencies meet cybersecurity, incident and resilience responsibilities in the defined scope.
Discuss resilience controlsAgentic AI Assurance
Assess autonomy, tool use, escalation, human intervention and operational boundaries before deployment.
Explore Agentic AI AssuranceCross-border technical-forensic audit
Review models, data, logs, traceability, security and the evidence needed to reconstruct decisions.
Explore the technical-forensic audit04 / Assurance Passport — under construction
A shareable view, bounded by the report you can actually release.
The Assurance Passport is designed for procurement, auditors, boards and partners who need to understand an available final report or evidence pack without opening a public archive of confidential evidence. The shared view shows only the scope of the released projection and the jurisdictions actually declared.
4 audiences, one boundary
Useful sharing, without implied promises.
Capability under construction. The Assurance Passport is not a certification, is not assurance or certification of conformity, is not regulatory approval and is not legal advice. It shows only the scope of the engagement and report actually released; it does not guarantee outcomes beyond that evidence.
Procurement
A readable summary connecting scope, evidence status and limits to supplier evaluation.
Auditors
A controlled access point to the shared projection, with report version and verifiable boundaries.
Boards
A concise view of what was released, human-reviewed and explicitly left out of scope.
Partners
A traceable way to share useful context without implying coverage or approval.
How it stays controlled
Scope and jurisdictions
The Passport exposes the scope of the released report and only jurisdictions that are actually complete and in force.
Evidence and human review
Checklists, linked evidence and versioned snapshots can show their status, checksum and approved human review indicator; reports and PDF exports remain bounded by availability.
Declared limits
Gaps, assumptions and boundaries stay visible: the Passport does not promise coverage beyond the available projection.
Access with expiry
The link or invitation has controlled access and an explicit expiry for the intended share.
Revocation
The owner can revoke the share; a revoked or expired link no longer opens the view.
Audit trail
Relevant access, interactions and monthly delivery updates leave an audit trail that preserves the sharing and reporting context.
Capability under construction. The Assurance Passport is not a certification, is not assurance or certification of conformity, is not regulatory approval and is not legal advice. It shows only the scope of the engagement and report actually released; it does not guarantee outcomes beyond that evidence.
Request an AI Governance Readiness Check02 / Regulated sectors
Context matters before a control can be assessed.
These are service contexts, not a list of engagements. The actual perimeter, evidence set and responsibilities are defined for each assignment.
financial-services
Financial services
Decision support, fraud, credit and public-facing systems where traceability and accountability matter.
health-life-sciences
Healthcare & life sciences
Clinical, research and operational AI where safety, data governance and human oversight shape the review.
infrastructure-energy-telecom
Infrastructure, energy & telecoms
Operational environments where resilience, dependency mapping and incident readiness are central questions.
public-industrial
Public & industrial sectors
Public-service and industrial workflows where procurement, impact and operational controls need a clear record.
03 / Method & evidence
Make the evidence trail readable.
Our method connects the obligation, the system behavior, the control owner and the record that can support a careful conclusion. The public methodology explains the method; each engagement defines its own evidence boundary.
Evidence can include
System and decision maps
Models, data flows, interfaces, users and decisions in scope.
Control and ownership records
Policies, responsibilities, approvals and change history.
Operational traces
Tests, logs, monitoring views, tickets and incident records.
Jurisdiction sources
Official material, consultation dates and open gaps in the reference matrix.
Reference perimeter
14 jurisdictions, one evidence boundary.
The public matrix links official sources, languages and open gaps. It is a documented reference perimeter; the actual scope is set for each assignment.
Explore the matrixNot legal advice or regulatory approval.
The next useful step
Bring the real system into the conversation.
Share context, jurisdictions and evidence questions. We start with scope, not a pre-written conclusion.
Official contacts
Maison Sasson ltd - United Kingdom