We'll find out for you. We identify risks, set up governance, and prepare you for the AI Act — before the auditor asks.
Maturity score
Critical domains
Transparency deadline
December 2, 2026
Max fine
€35M / 7%
Companies not ready
64%
How many people in your company use AI tools every week?
If an auditor asked you tomorrow 'which AI systems do you use and how do you control them' — could you answer within 10 minutes?
Do you have someone formally accountable for AI decisions and AI incidents?
If you hesitated on any of these, you're not alone. 64% of EU companies are in the same position.
Three connected services — from initial audit to ongoing governance program.
We walk the entire organization — 10 domains, 80 controls, evidence-based review. Get maturity scoring and a clear roadmap.
About assessments →Level 2 · Valid
GovReady AI Governance
sha256:4e3f…b2c1
A document you can present to your board, investor, or auditor. Issued by GovReady (Sarnecky & Co.).
About certification readiness →Copilot · DPA update
Review required
We keep your governance current — AI-BOM monitoring, tool status alerts and reassessment.
About monitoring AI tools →Four steps from the first question to a finished report.
5-minute online test. Instantly see where you stand — free.
45 minutes with an expert. We define scope, stakeholders, timeline.
2–6 weeks of evidence review across 10 domains.
Report with maturity scoring, findings, roadmap and path to a Readiness Statement (certification readiness).
5-minute online test. Instantly see where you stand — free.
45 minutes with an expert. We define scope, stakeholders, timeline.
2–6 weeks of evidence review across 10 domains.
Report with maturity scoring, findings, roadmap and path to a Readiness Statement (certification readiness).
A curated database of AI services with ready-made compliance profiles. Connect them to your AI-BOM and get alerts whenever a vendor changes anything — DPA, sub-processor, data residency, security incident.
50+ AI tools tracked
Updated weekly
We built the GovReady Companion so anyone can navigate the EU AI Act, check AI tool risk and run a quick governance maturity audit — directly inside the AI assistant they already use. No account, no plan, no friction.
Public Custom GPT · ChatGPT Plus, Pro, Team
Open the public GovReady AI Governance Companion GPT. Ask it to classify a use case, look up an Article or run the 12-question audit. Works on any ChatGPT plan that supports custom GPTs.
MCP server · Claude Desktop · Cursor · CLI
Add the GovReady Companion as an MCP server in Claude Desktop, Cursor or any MCP-aware client. The same toolset, fully native to your assistant, available offline-style as part of your normal chat.
Built by GovReady. Open data, EUR-Lex citations, no conversation logging — just the same governance know-how, available where your team already works.
From the first finding through continuous AI tool monitoring to certification readiness with a verifiable Readiness Statement — all in one place.
01
Evidence, findings, severity and roadmap across 10 domains — in real time for your team and your client.
Active case
ACME Corp · Core AI governance
02
A curated database of AI tools wired to your AI-BOM. Vendor changes → alerts for you.
AI Bill of Materials
ACME Corp · 12 tools
Microsoft Copilot
Microsoft
ChatGPT Enterprise
OpenAI
Claude
Anthropic
Midjourney
Midjourney Inc.
Notion AI
Notion Labs
03
Readiness Statements with cryptographic hash and public URL. Partners verify in 2 seconds.
Public Readiness Statement
GovReady AI Governance · Level 2
Issued to: ACME Corp
Issued
2026-02-14
Expires
2027-02-14
Verification hash
sha256:4e3f…b2c1a9 · verified
We serve companies that must deal with AI governance — regardless of size.
Regulated players with strict requirements for data, audit trail and vendor control.
Mid-size organizations with fast Copilot and Microsoft 365 AI rollouts.
Due diligence on AI usage is now a common deal item — GovReady delivers a standardized output.
If your employees use AI, you need governance. Full stop.
Our proprietary framework maps the AI Act, ISO 42001 and NIST AI RMF into concrete, auditable controls.
Governance & Accountability
AI Inventory & Visibility
Data Governance for AI
Security & Access Control
Responsible Use & Human Oversight
AI Risk Management
Vendor & Third-Party AI
Training & Awareness
Incident Response for AI
Documentation & Evidence
Project pricing for assessments. Monitoring AI tools is billed monthly. We prepare a tailored quote based on scope.
On request
indicative · tailored quote
2–3 weeks
First clear picture — AI inventory, top-line gap analysis, baseline report. Ideal as a first step.
Book a call →On request
indicative · tailored quote
4–6 weeks
Full assessment of all 10 domains and 80 controls. Maturity scoring, findings, roadmap and Readiness Statement.
Book a call →On request
indicative · tailored quote
8–12 weeks
Extended scope for large companies, multiple stakeholders, complex AI stacks and regulated environments.
Book a call →These are indicative minimum prices. The final amount depends on company size, scope and specific needs. We will prepare a precise quote after a short scoping call.
Ongoing monitoring, AI-BOM updates, tool alerts, quarterly reassessment and priority support.
Transparency & watermarking duties for AI-generated content (Art. 50) now apply from 2 December 2026 — moved from 2 August 2026, with a 4-month grace period for systems already on the market. By then your governance program must be running and documented.
December 2, 2026
—
days until 2 December 2026 (transparency & watermarking)
AI Act vs. GDPR — financial exposure
AI Act fines exceed GDPR. They also cover general-purpose AI models and their deployers.
A governance program usually takes 6–12 months to implement. If you haven't started, start now.
Timeline update: the transparency & watermarking obligations (Art. 50) are now confirmed for 2 December 2026 — moved from 2 August 2026, with a 4-month grace period for systems already on the market. High-risk (Annex III) obligations are being postponed further — expected 2 December 2027 under the Digital Omnibus, pending formal EU adoption.
The answers we give most often on scoping calls.