Everything in Tier 1
Gap report, AI system inventory, prioritised roadmap and workspace access.
Tier 2 · ISO/IEC 42001 services for UK SaaS
AI Governance Readiness
£3,950 · Founding rate · First 3 clients
4–6 weeks · 100% upfront · Workspace included
Assess our real AI risks and give us the core governance foundation.
Standard £4,500. Includes everything in Tier 1.
Services aligned with ISO/IEC 42001. Bhaviyo is not a certification body and does not guarantee certification.
Deliverables
What's included.
Risk methodology, register and treatment plan
Likelihood and impact criteria, identified risks and planned treatments.
AI system impact assessments
A report per system covering effects on individuals and groups.
AI policy
Ready for leadership approval.
Draft Statement of Applicability
Which Annex A controls apply, and why.
Leadership walkthrough
A 90-minute walkthrough with leadership and your technical lead.
Scope limits
- Everything in Tier 1.
- Kickoff and AIMS scope discussion.
- AI system inventory.
- Gap assessment against ISO/IEC 42001 Clauses 4–10 and Annex A controls.
- Up to 3 remote stakeholder interviews.
- Review of existing documents.
- AI risk assessment methodology.
- AI risk assessment and treatment plan for up to 2 AI systems.
- AI system impact assessment for up to 2 AI systems.
- Technical review of each AI system: data flows, model/vendor dependencies, human oversight and misuse risks.
- Draft AI policy.
- Draft Statement of Applicability.
Timeline
- Week 1Kickoff.
- Weeks 1–3Gap assessment.
- Weeks 2–5Risk and impact assessments.
- Weeks 4–6Policy, Statement of Applicability draft and walkthrough.
Client contribution
A project owner, a technical contact who can explain your AI systems, and leadership time for approvals. We confirm this at kickoff.
Package exclusions
- —Certification body audit fees (paid directly by the client).
- —Any guarantee of certification.
- —Legal advice or legal opinions.
- —Penetration, bias or model testing.
- —Performing the internal audit of an AIMS we implemented (must be independent).
Engagement conditions
- Written scope, responsibilities, timeline and payment agreed before work begins.
- Tiers 1–2 paid in full before work starts.
- Workspace access continues for 90 calendar days after final handover.
- Engagement data is deleted within 45 days after that unless agreed otherwise in writing.
- Extra AI system: £950.
Prices in GBP. Taxes, if any, are confirmed in your written quote.
Not sure where you stand on ISO 42001? Let's find out.
We reply within 1 business day to arrange a 30-minute discovery call.
Book a Discovery Call