Skip to content
Scope builder

Get the scope in writing before you get on a call

Nobody signs a five-figure engagement off a form that says “we will be in touch”. Answer ten questions and you leave with a proposal document: which engagement fits, what you are left holding, what we explicitly do not do, how long it takes and what it costs to start.

Every figure below is a starting point, not a quote. Scope and price are settled in a conversation once we know how many AI systems you run, what they do and what evidence already exists — and if a $390 report or a software plan would serve you better, we will say so.

Ten questions, about two minutes

Multiple choice, mostly. Nothing we ask is decorative — every answer changes something in the document you get.

A branded proposal, immediately

Scope, deliverables, exclusions, timing, an indicative fee and a document reference. It downloads in your browser and lands in your inbox, ready to forward to whoever signs.

A person reads it

Within 2 business days you get either a firm scope, fee and start date — or an honest note that you do not need this engagement yet.

The single number that most changes the scope. An estimate is fine.

Does any system fall in an Annex III area?

Recruitment, credit, education, essential services, medical, law enforcement — “not sure” is a legitimate answer and changes the scope.

Do you use or provide general-purpose AI models?

Foundation or general-purpose models, whether yours or someone else's.

Do you already hold ISO 27001?

An existing management system is reused rather than rebuilt.

Classification, obligations and documentation before the statutory dates.

We use your details to send the proposal and to reply to it. No sales sequence, and every email we send carries a one-click unsubscribe.

What no proposal from us will ever say

These exclusions are printed in every document this page produces. They are half of the scope definition, not small print.

  • Legal advice. We are not a law firm and nothing we deliver replaces your own counsel's review.
  • Certification, attestation or any mark. Only an accredited certification body can audit and certify a management system — we are not one, and no engagement here promises a certification outcome.
  • Accredited audit work, and any role that would compromise the independence of your auditor.
  • Representing you before a regulator or a notified body.

This document is a proposal: a description of scope, deliverables, timing and an indicative fee. It is not a contract, not an offer capable of acceptance, and it creates no obligation on either side. Work begins only under a signed engagement letter, whose scope and fee are agreed after a scoping conversation.

The engagements it chooses between

Rather do it yourself with software? See the plans.