Engagement scoping
Every engagement is custom-scoped: assessments, fintech dossiers, ongoing reviews, implementation, security, governance, and federal advisory. We agree the deliverables, responsibilities, and schedule first. Every engagement is a fixed fee, set in writing after a scoping call - never hourly, never a surprise.
Risk categories guide the scope, not a published price. See what the assessment covers.
Fixed fee after scoping
Tools that draft, summarize, or transcribe but never touch a business decision or regulated data.
Typical tools: Marketing copy tools, meeting transcription, internal chatbots
Fixed fee after scoping
Tools that ingest, transform, or store customer PII, financials, or proprietary files.
Typical tools: Document processing, support chatbots on customer data, analytics copilots
Fixed fee after scoping
Tools whose output drives a consequential decision about a customer, employee, or borrower.
Typical tools: Screening, scoring, pricing, eligibility, or recommendation engines
Fixed fee after scoping
The full-stack audit: every AI vendor in the business assessed together, with the rationalization and cost-takeout plan across the whole portfolio.
Fixed fee after scoping
Vendors change their terms constantly. Ongoing monitoring re-verifies data-training and retention terms quarterly and flags new shadow AI as it appears.
Schedules depend on vendor count and available evidence. The cost-takeout plan puts an annual dollar figure on every redundant subscription, so you can weigh what retiring them saves against the fee.
For AI fintechs
An indexed evidence package for the bank's risk, security, and procurement review.
Fixed fee after scoping
For federal IT and defense contractors
AI governance, evaluation evidence, and security documentation scoped to the solicitation or project.
Fixed fee after scoping
Implementation, security, and governance work does not come in standard sizes. A governance program for a 30-person practice and one for a 300-person lender are different jobs, so there is no list price to publish. Each engagement is priced in phases: a written fixed fee for the first phase after the scoping call, then a written fixed fee for the rest once that phase shows what the work involves.
Fixed fee per phase. Use-case discovery is priced first; rollout and training are priced once you know which tools you are deploying and who will use them.
Fixed fee per phase. The SBOM and reachability triage are priced from your application count; vulnerability research is priced per component after triage shows where the risk sits, with coordinated disclosure included.
Fixed fee per phase. A gap assessment comes first; the framework or program build is priced from what it finds.
Start with a thirty-minute scoping call. We then confirm the scope, fixed fee, and schedule in writing before work starts.
