The AI audit, in 30 seconds
The questions customers, investors and regulators ask, and how an audit answers them.
AI & data audit · $4,000–8,000
Check my AI and my data.Be ready when a customer, investor or regulator asks.
I check your AI and your customers’ data against the laws where you sell, and give you a fix-list.
- For
- Startups and growing businesses before an enterprise deal, a fundraise or a launch in a new country.
- Takes
- 3–6 weeks
- Price
- $4,000–8,000, depending on how many products, AI features and countries you have. Fixed in writing before work starts.
(01)Is this you?
If any of these sound familiar, this is for you.
- 01A big customer sent an AI or privacy questionnaire and the deal is waiting.
- 02Investors asked for your AI policy or privacy set-up and you don’t have one.
- 03You’re launching in Europe, the UK, the US or India.
- 04Your AI helps decide who gets a job, a loan, insurance or treatment.
- 05Your privacy policy came from a template.
- 06Nobody owns user requests, deletion or what to do after a data leak.
(02)Watch · 29 seconds
See it in 30 seconds.
The questions customers, investors and regulators ask, and how an audit answers them.
(03)What I look at
What I check.
- 01
Find all your AI and data
Every AI feature and tool, and what personal data you collect, why and where it goes. - 02
Work out which laws apply
Country by country, including the EU AI Act, the GDPR, US state laws and India’s DPDP Act. - 03
Check what users see
Privacy policy, cookie banner, consent and AI disclosures, against what the product really does. - 04
Check your suppliers
What your AI and software suppliers can do with your data, and data sent abroad. - 05
Keep a human in control
Review, approval and appeal routes where AI makes decisions about people. - 06
Test the processes
A user request and a mock data leak, run together, with fixes.
(04)What you get
Yours to keep.
Plain English. Most urgent first. Ready to act on.
- Your AI and data map
- All your AI and data in one place: what, where and who.
- Which laws apply
- A short memo by country: why, and from when.
- Report and fix-list
- Every gap, most urgent first, with owners.
- Fixed documents
- Your privacy policy, cookie banner, contracts and AI policy, marked up.
- Proof for customers
- Ready answers for customer and investor questionnaires.
(05)How it works
Step by step. Very little of your time.
- Day 1
Call
You show me the product. We agree what’s covered, the deadline and the price, in writing. - Week 1
Map
A short questionnaire and a few calls. I list your AI and your data. - Weeks 2–3
Find the gaps
Laws by country; policies, consent, contracts and suppliers checked. - Week 4
Results call
Report, fix-list and a call with the founders. - Then
Fix it (optional)
I draft documents and help fix consent and request flows.
(06)Questions
Straight answers.
Can you check only our AI, or only our data?
Yes. The audit can focus on one of them, and the price reflects that.
Is this an EU AI Act certification?
No. It’s a compliance review, not legal advice or a certification. It shows whether certification is likely to apply to you and how to prepare. Official conformity checks are done by approved bodies.
We only use OpenAI, Anthropic or Google. Do we need this?
Usually, yes. The law looks at how you use AI, not who built the model. A product built on an API is your product.
We have SOC 2 or ISO 27001. Isn’t that enough?
No. Those cover security. Privacy laws also ask why you use data, what you tell users, how you handle requests and where data goes.
Will this get us ready for India’s DPDP Act?
It gives you a clear plan and the order to do things in, so you’re ready before the main duties apply in May 2027.
What does it cost?
$4,000–8,000, fixed in writing before I start. It depends on how many products, AI features and countries you have.
(07)Contact
Let's talk.
Send me the link and one line about what's wrong. I'll tell you honestly what's broken, what matters and what can wait. If you don't need me, I'll say that too.
Free · 30 minutes · no obligation. If you don't need me, I'll say so.
Rather write?
Other ways to reach me →