Three service lines. Clear scope. Clear independence.
Start with the outcome you need: an independent assessment, help deciding or implementing how AI should be used, or practical training for the people involved.
Every engagement is scoped and proposed in writing after an initial conversation.
AI Governance Assessment & Assurance
Productised and evidence-led
Independent assessment of one system or an agreed portfolio.
- System and risk profile
- Adaptive governance assessment
- Evidence review and traceability
- Reviewer-confirmed findings
- Gap and action requirements
- Agreed report outputs
AI Consulting & Responsible Implementation
Advisory and delivery support
Help with AI strategy, use cases, value, design, testing, governance and data.
- AI strategy and roadmap
- Use-case and benefit analysis
- Solution and governance design
- Test and evaluation strategy
- Data acquisition and provenance
- Data quality, sufficiency and representativeness
AI Training & Capability Building
Role-based and practical
Executive briefings, team workshops and tailored capability programmes.
- Boards and executives
- Governance, risk and legal
- Business and product teams
- Technology and data teams
- Responsible AI adoption
- Evidence and assurance readiness
Three ways to scope independent assessment
The assessment line can start with one system, extend across a portfolio, and maintain an accepted baseline over time — provided Eshalu remains independent of design and implementation for the systems being assessed.
Focused Assessment
Establish an evidenced and independently reviewed position for one priority AI system or one clearly defined governance concern.
Portfolio Assurance
Establish a governed view across an agreed portfolio of AI systems, suppliers, functions or business units.
Continuous Assurance
Maintain the independently assessed baseline as evidence, systems, suppliers and applicable obligations evolve within the contracted scope, including a full annual reassessment.
Assessment findings may include recommended outcomes and evidence requirements. If Eshalu is then asked to design or implement the remediation itself, that system moves outside Eshalu's independent-assessment scope for that work.
What is included in the assessment models
The same governed record sits underneath each assessment model. What changes is the number of systems, depth of portfolio work and whether the independent baseline is maintained afterwards.
Swipe horizontally to compare assessment models →
| Focused Assessment | Portfolio Assurance | Continuous Assurance | |
|---|---|---|---|
| AI system scope | One system | Agreed portfolio | Agreed existing baseline portfolio |
| Risk and regulatory screening | Included | Included per scoped system | Refreshed for the agreed baseline |
| Adaptive assessment | Included | Included per scoped system | Full annual reassessment within baseline scope |
| Evidence review | Agreed evidence set | Scoped portfolio evidence | Agreed evidence refresh |
| Reviewer decisions | Included | Included | Included for refreshed positions |
| AI system register | Single-system record | Portfolio register | Maintained for agreed baseline |
| Gap and action requirements | Included | Consolidated plan | Existing findings tracked |
| Audience reports | One agreed primary report | Agreed report set | Agreed reports refreshed annually |
| Regulatory-change monitoring | Current assessment context | Current engagement context | Relevant changes reviewed for the agreed baseline |
| Design or implementation consulting | Not included | Not included | Not included for systems kept in independent-assessment scope |
| Legal advice or certification | Not included | Not included | Not included |
Common questions about scope and independence
Can we begin with one AI system?
Yes. A Focused Assessment is designed as a contained starting point before deciding whether to extend assurance across a wider portfolio.
Can Eshalu help us design or implement AI?
Yes, under the AI Consulting service line. That can cover strategy, use cases, design, testing, governance, data and implementation support.
Can Eshalu then independently assess the work it helped implement?
No. If Eshalu materially advises on, designs or helps implement a system or control, Eshalu will not present itself as the independent assessor of that same work.
What happens if an assessment identifies remediation?
The assessment can explain the finding, the expected outcome and the evidence needed for closure. The client can remediate independently and return for reassessment. If Eshalu is engaged to design or implement the remediation, the independence boundary applies.
What does AI consulting cover?
Typical scope includes AI strategy, use-case prioritisation, benefits, operating model, solution and governance design, testing and evaluation, supplier considerations, lawful data acquisition, provenance, lineage, quality, sufficiency, representativeness and monitoring.
Who is training for?
Boards and executives, governance/risk/legal teams, business and product teams, and technology/data teams. Content is tailored to the decisions and responsibilities of the audience.
How is the commercial proposal agreed?
We do not publish standard prices at this stage. After an initial conversation, Eshalu confirms the scope, deliverables, included support and commercial proposal in writing.
Does Eshalu provide legal advice or certification?
No. Eshalu does not provide legal advice or certify compliance.