Senior expertise built for companies, public agencies, and nonprofits, across nine practice areas. We help you put AI to work with confidence, prove it’s governed, and stay ahead as the rules keep changing.
Service catalog · cogentassurance.com · 200 East Randolph Street, Suite 5100, Chicago, IL 60601
Choose a goal to see the services that fit.
A clear, written policy that tells your people which AI tools they can use, for what work, and with what data.
An AI acceptable use policy plus a team workshop to teach it, the fastest way to put clear AI rules in place.
A practical workshop that gets your team using AI productively and within your policies.
Finds the AI tools in use without approval, using purchasing records, sign-in data, and a staff survey.
A gap analysis of your AI governance against the NIST AI RMF, with a prioritized plan for what to fix first.
A complete starting AI governance program in 90 days: policy, register, approval process, training, and a roadmap.
Our most thorough test: an AI system run against 100 or more realistic scenarios, with a signed assurance letter.
A fast pre-launch check of an AI agent’s permissions, guardrails, and escalation, lighter than a full assurance test.
Adversarial testing that tries to make your AI system leak data, break its rules, or produce harmful output.
A gap analysis of your AI governance against the NIST AI RMF, with a prioritized plan for what to fix first.
AI inventories and impact assessments in the format your state requires, such as Maryland’s, for agencies.
An assessment of how the EU AI Act applies to your AI systems and what you need to do to comply.
An assessment of your AI management system against ISO/IEC 42001, the international standard for governing AI.
Hands-on help building the AI management system ISO/IEC 42001 requires, ready for a certification audit.
The independent internal audit ISO/IEC 42001 requires, conducted by a qualified lead auditor.
A complete privacy program: data map, policies, notices, rights requests, and vendor oversight.
A focused assessment of the privacy risks in one system or project, including AI systems, with specific safeguards.
Monthly privacy support from our team: rights requests, vendor reviews, notice updates, and law changes.
Independent help choosing the right AI product or vendor, without a formal RFP, so you buy with confidence.
Clear AI requirements, evaluation criteria, and contract terms, so you choose the right AI system and vendor the first time.
An ongoing program to vet, approve, and monitor the AI vendors and AI features your organization relies on.
A focused session for executives and boards on AI opportunities, risks, and oversight.
A practical workshop that gets your team using AI productively and within your policies.
One-on-one sessions that help you use AI tools effectively and safely in your own work.
Independent testing and an assurance report software vendors can share with enterprise and public sector buyers.
Quarterly retesting and monitoring after an assurance test, so your AI stays accurate, fair, and safe as it changes.
Adversarial testing that tries to make your AI system leak data, break its rules, or produce harmful output.
Find your stage, and start with the services that fit it. Every engagement follows the Cogent AI Governance Framework.
AI is in use, but no one owns it. There’s no policy, no inventory, and no approval process.
Start with
A policy exists and someone is responsible, but AI uses aren’t fully tracked or reviewed.
Start with
There’s an AI register, an approval process, and regular reporting to leadership and the board.
Start with
AI governance is measured, audited, and built into how you buy and build technology.
Start with
Bundled starting points that combine our most-requested services. Choose the level that fits where you are today.
$1,5952–3 weeks
An AI acceptable use policy plus a team workshop to teach it, the fastest way to put clear AI rules in place.
Best for: Organizations that need AI rules fast
View details$9,50090 days
A complete starting AI governance program in 90 days: policy, register, approval process, training, and a roadmap.
Best for: Organizations ready for a full program
View details$15,5009 months
The 90-day program, six months of ongoing oversight, and an independent assurance test of one AI system.
Best for: Organizations wanting a full first year
View detailsPolicies, assessments, and ongoing leadership that put clear rules and owners around AI.
From $7501–2 weeks
A clear, written policy that tells your people which AI tools they can use, for what work, and with what data.
From $5,0003–4 weeks
A gap analysis of your AI governance against the NIST AI RMF, with a prioritized plan for what to fix first.
From $7,5003–5 weeks
An assessment of how the EU AI Act applies to your AI systems and what you need to do to comply.
From $5,0002–4 weeks
An assessment of whether your data is accurate, permitted, and well-governed enough to use with AI.
$500 per month6-month minimum
Monthly AI governance support from our team: tool reviews, policy updates, and register upkeep.
From $5,000 per monthOngoing
A named senior executive who owns your AI governance or privacy program and reports to your leadership.
From $6,5003–5 weeks
A safe rollout of Microsoft 365 Copilot, ChatGPT Enterprise, or Gemini, from data access and permissions to staff rules.
From $4,5002–3 weeks
Finds the AI tools in use without approval, using purchasing records, sign-in data, and a staff survey.
From $9,5006–10 weeks
AI inventories and impact assessments in the format your state requires, such as Maryland’s, for agencies.
Independent testing and review that shows your AI systems work as intended, safely and fairly.
From $5,000 per system2–4 weeks
Our most thorough test: an AI system run against 100 or more realistic scenarios, with a signed assurance letter.
From $7,500 per system2–3 weeks
Adversarial testing that tries to make your AI system leak data, break its rules, or produce harmful output.
From $3,500 per agent1–2 weeks
A fast pre-launch check of an AI agent’s permissions, guardrails, and escalation, lighter than a full assurance test.
From $1,500 per system1–2 weeks
An independent review of one AI tool, vendor, or use case before you adopt it or expand it.
From $7,500 per tool3–5 weeks
An independent bias audit of AI tools used in hiring and promotion, including audits required in New York City.
From $3,500 per system1–3 weeks
A review of whether your AI chatbots and tools work for people with disabilities, against WCAG standards.
From $12,500 per model4–6 weeks
Independent fair lending testing of AI used in credit decisions, with results ready for examiners and boards.
From $15,000 per product4–8 weeks
Independent testing and an assurance report software vendors can share with enterprise and public sector buyers.
From $1,500/mo per system12-month term
Quarterly retesting and monitoring after an assurance test, so your AI stays accurate, fair, and safe as it changes.
Security leadership, vendor oversight, and incident readiness for the systems AI runs on.
From $4,000 per monthOngoing
A part-time security leader who owns your security program, policies, and risk decisions, including AI systems.
From $7,5004–6 weeks
An ongoing program to vet, approve, and monitor the AI vendors and AI features your organization relies on.
From $3,500Half-day session
A facilitated simulation of an AI failure or data exposure that tests how your team would respond.
ISO/IEC 42001 is the international standard for managing AI responsibly. We help you reach and keep certification to it.
From $7,5004–6 weeks
An assessment of your AI management system against ISO/IEC 42001, the international standard for governing AI.
From $15,0003–6 months
Hands-on help building the AI management system ISO/IEC 42001 requires, ready for a certification audit.
From $5,0002–3 weeks
The independent internal audit ISO/IEC 42001 requires, conducted by a qualified lead auditor.
Privacy programs, assessments, notices, records rules, and ongoing operations that protect personal data.
From $10,0006–10 weeks
A complete privacy program: data map, policies, notices, rights requests, and vendor oversight.
From $3,000 per system2–3 weeks
A focused assessment of the privacy risks in one system or project, including AI systems, with specific safeguards.
From $4,0003–4 weeks
A complete inventory of the personal data you hold, plus an updated privacy notice that matches it.
From $6,0004–6 weeks
Rules for how long to keep AI prompts, outputs, and related records, and how to find them when needed.
From $5,0003–5 weeks
The security risk analysis HIPAA requires, covering every system that holds health information, including AI tools.
$750 per month6-month minimum
Monthly privacy support from our team: rights requests, vendor reviews, notice updates, and law changes.
AI due diligence before a deal closes, integration after it does, and consulting support for counsel in AI matters.
From $15,000 per deal3–6 weeks
An independent review of a target company’s AI systems, data rights, and AI legal exposure before closing.
From $10,00060–90 days
Bringing an acquired company’s AI uses under your policies, register, and controls in the months after closing.
From $300 per hourAs the matter requires
Consulting expert support for attorneys in cases involving AI systems, algorithms, and automated decisions.
Buyer-side help from choosing a vendor to staff adoption after launch. We work only on the buyer’s side.
From $2,5001–3 weeks
Independent help choosing the right AI product or vendor, without a formal RFP, so you buy with confidence.
From $5,000 per solicitation2–6 weeks
Clear AI requirements, evaluation criteria, and contract terms, so you choose the right AI system and vendor the first time.
From $4,000 per monthFor the length of the project
A senior advisor on your side who acts as product owner and keeps the vendor accountable through go-live.
From $6,0006–12 weeks
A structured plan to get staff using new AI tools well, from communication and training to measuring adoption.
Practical training and talks that help people use AI productively and within the rules.
$150 per hour5-hour package: $675
One-on-one sessions that help you use AI tools effectively and safely in your own work.
$995 per session2 hours, up to 20 participants
A practical workshop that gets your team using AI productively and within your policies.
$49560 minutes
A focused session for executives and boards on AI opportunities, risks, and oversight.
From $1,500 per talk30–60 minutes
Talks on AI governance, AI risk, and practical AI use for conferences, associations, and leadership teams.
$150 per hourHalf-day workshop plus follow-up
AI training built for one team’s real work, with the rules and risks that apply to that department.
For organizations whose needs go beyond a single package, we scope engagements around your goals.
From $5,000
We design the policies, roles, and review process for approving and monitoring AI, sized to your organization rather than copied from a template.
From $1,500 per system
Before a system goes live, or after it already has, we assess what it does, who it affects, and what could go wrong, then recommend specific controls.
From $10,000
We build and strengthen privacy programs so you know what personal data you hold, why you hold it, who can access it, and how you protect it.
From $7,500
We help state and local agencies write AI policies, procurement standards, and solicitation language that protect the agency, independent of any vendor.
From $5,000 per month
We serve as your part-time Chief Privacy Officer or Chief AI Officer: setting priorities, running the governance committee, and reporting to leadership.
From $5,000
Consulting firms and system integrators that deploy AI into client businesses carry their own exposure. We help them set governance standards for their delivery work and their client agreements.
We work through the purchasing methods agencies already use, so you can engage us without starting a new procurement. Download our capability statement (PDF).
Federal agencies can buy directly through our GSA schedule, and state and local governments can use it through GSA’s Cooperative Purchasing program.
State and local agencies can work with us through NASPO ValuePoint cooperative contracts held by our partners.
Agencies can purchase our services through Carahsoft and its network of reseller partners and contract vehicles.
Public entities can buy through TIPS and OMNIA Partners cooperative contracts without running a separate solicitation.
Many of our packages and training sessions fall under typical small-purchase thresholds, so agencies can often buy them quickly.
We inventory your AI systems and personal data, review existing policies, and identify the gaps that carry the most risk.
We draft the policies, review process, and records your organization needs, and walk your leadership through every decision.
We help your team run the program: reviewing new use cases, updating the register, and preparing for audits and reviews.
Tell us what you're working on, and we'll reply within one business day.