Services / Custom Engagements
AI Risk and Impact Assessments
Assessments of what each AI system does, who it affects, and what could go wrong, with specific controls to address it.
From $1,500 per systemScoped to the systems in review
Public agencies receive quotes structured to fit their procurement rules.
You own everything we produce.
Who this is for
Organizations usually call us about this when:
You need several AI systems or vendors assessed together.
A high-risk system needs documentation regulators or customers will accept.
An AI system already in use has never been formally assessed.
Overview
Before a system goes live, or after it already has, we assess what it does, what data it uses, who it affects, and what could go wrong. We cover individual systems, vendor products, and portfolios of AI uses, and we document the results in the form regulators, auditors, and customers increasingly expect.
What’s included
- Use-case and vendor assessments
- Algorithmic impact assessments
- Data and privacy risk review
- Fairness and accuracy considerations
- Recommended controls and owners
- Readiness reviews for state AI laws and the EU AI Act
How it works
Scope
We agree on the systems, questions, and format of the results.
Assess
We review documentation, data, vendors, and how people use each system.
Report
You receive risk ratings, findings, and recommended controls.
How it works for your organization
The same service, tailored to the obligations and realities of each sector.
Private Sector
Companies use custom assessments to evaluate several AI systems or vendors at once.
- Portfolios of AI uses
- High-risk systems under new state laws
- Customer-facing AI
- Evidence for audits and diligence
Public Sector
Agencies use custom assessments to evaluate AI that affects residents before and after launch.
- Systems affecting eligibility or services
- Vendor proposals and pilots
- Bias and human review requirements
- Documentation for oversight
Nonprofits
Nonprofits use custom assessments when AI tools touch vulnerable clients or sensitive records.
- Client-facing tools
- Tools with client or health data
- Donated and free tools
- Practical controls for small teams
Frequently asked questions
How much does AI Risk and Impact Assessments cost?
AI Risk and Impact Assessments starts at $1,500 per system. The final price depends on scope, and we confirm it in writing before any work begins.
How long does it take?
Most engagements take Scoped to the systems in review, depending on scope and how quickly information is available.
What do we receive?
The engagement includes: use-case and vendor assessments; algorithmic impact assessments; data and privacy risk review; fairness and accuracy considerations.
What if a deliverable doesn’t meet the agreed scope?
We revise it until it does, at no extra cost. And if we miss an agreed delivery date, we take 10% off that deliverable.
Who owns the deliverables?
You do. Everything we produce for you is yours to keep, use, and share.
Related Guides
- AI Regulation Map for Credit UnionsThe federal and state laws that apply when credit unions use AI in lending, fraud detection, member service, and marketing, and what each requires.
- AI Use Policy Guide for Behavioral Health CentersWhat a behavioral health center’s AI use policy must cover, from HIPAA and 42 CFR Part 2 to state laws restricting AI in therapy.
- AI Risk Register for Credit UnionsA sample register of common credit union AI uses, the data each one touches, its risk tier, the controls it needs, and who owns it.
Related services
AI Risk Review
An independent review of one AI tool, vendor, or use case before you adopt it or expand it.
AI Assurance Test
Our most thorough test: an AI system run against 100 or more realistic scenarios, with a signed assurance letter.
AI Governance Readiness Assessment
A gap analysis of your AI governance against the NIST AI RMF, with a prioritized plan for what to fix first.
Talk through your AI and privacy questions
Tell us what you're working on, and we'll reply within one business day.