Deploy AI without legal asking who signed it off.
Security leadership on the org chart, not on the payroll.
Answer the board when a supplier is breached.
Not sure which of these you need? Twelve questions, a score, and a dated plan. No login, no email until you have seen the result.
Book a consultationCyber security & AI governance · London
ISO 27001, ISO 42001 and the EU AI Act, run end to end by the people who do the work. No Big Four bench, no junior on your account.
Or call +44 (0) 203 488 7252Company No. 09541018, since 2015
What we do
Most engagements start in one and pull in the others, because the questionnaire that triggered the call is rarely the actual gap.
AI Security
Engineering wants to ship with AI. Legal wants to know who is accountable when it goes wrong. Banning it loses you the year; ignoring the risk loses you the customer.
You getPolicy, an accountable owner, a model inventory and the evidence trail that survives an audit.
All of AI SecurityManaged vCISO
You need enterprise-grade security governance to close enterprise deals, at a stage where a full-time CISO is neither affordable nor retainable.
You getA named security leader who owns the roadmap and the board report, backed by engineers who do the work.
Supply Chain & Resilience
You are accountable for the aggregate risk of an estate you do not control, and annual questionnaires are not evidence of anything.
You getSuppliers tiered by criticality, the top tier verified against evidence rather than self-assessment.
All of Supply Chain & ResilienceFree tools
Nothing is gated. Each one shows you the answer before it asks you for anything, and every date and rate carries the source it came from.
Six questions. Which obligations reach you, and the date each takes effect.
What a CISO costs fully loaded, on your own assumptions.
Every UK and EU obligation tracked, with its source and check date.
Every tool we publish lives at cloudgap.ai/tools.
Start
Thirty minutes, no deck. We work out whether there is a real engagement here, and say so if there is not.
Six questions, a dated list of the obligations that reach you, and a calendar file so the deadlines land somewhere you will see them again.
You know the obligation and the deadline. We scope the sprints, the deliverables and the dates.
Or just email a human: hello@cloudgap.ai
We reply within24 hours