Start with one system. Scale when it earns it.
Eshalu engagements are priced according to the systems, evidence position and review work required — not by charging separately for every framework mapped.
One-time engagements are scoped and proposed in writing. Continuous Assurance begins after an agreed baseline has been established.
Focused Assessment
£3,000–£7,500
excluding VAT
One AI system or one priority governance concern.
- System profile and risk screening
- Adaptive control assessment
- Agreed evidence review
- Reviewer-confirmed findings
- Evidence log
- Gap and action plan
- One agreed primary report
Portfolio Assurance Programme
£8,000–£20,000
excluding VAT
An agreed portfolio of AI systems, suppliers, functions or business units.
- System inventory and registration
- Per-system assessment
- Evidence traceability
- Portfolio findings and dependencies
- Readiness view
- Remediation roadmap
- Agreed detailed and audience outputs
Remediation and Readiness Programme
£20,000–£40,000
excluding VAT
Convert accepted findings into owned actions, operating controls and reviewed closure evidence.
- Governed remediation plan
- Control and operating-model support
- Agreed templates
- Closure-evidence requirements
- Evidence review
- Targeted reassessment
- Updated readiness and closure outputs
Continuous Assurance
£25,000 per year
excluding VAT
Available after an initial assessment has established the baseline.
- Scheduled reassessment
- Evidence refresh and staleness review
- Existing remediation tracking
- Regulatory and framework change review
- Updated system and readiness records
- Refreshed agreed reports
- Governance-review meetings
Indicative one-time ranges. Final pricing reflects the number and complexity of AI systems, evidence maturity, required outputs, remediation scope and reviewer depth. Each one-time engagement begins with a written scope and fixed proposal.
The £25,000 annual service applies after an initial assessment and covers the agreed baseline scope. Material new systems, significant drift and major changes require separately agreed terms.
Four stages, entered where they fit
Clients may enter at the appropriate point. Continuous Assurance normally requires an accepted baseline established through an initial Eshalu assessment — not every client buys every stage.
Focused Assessment
Establish an evidenced and independently reviewed position for one priority AI system or one clearly defined governance concern.
Portfolio Assurance Programme
Establish a governed view across an agreed portfolio of AI systems, suppliers, functions or business units.
Remediation and Readiness Programme
Convert accepted findings into owned actions, operating controls and independently reviewed closure evidence.
Continuous Assurance
Maintain the agreed baseline as evidence, systems, suppliers and applicable obligations evolve within the contracted scope.
What is included
The same governed record underneath every model. What changes is scope, depth and whether the baseline is maintained afterwards.
| Focused Assessment | Portfolio Assurance | Remediation and Readiness | Continuous Assurance | |
|---|---|---|---|---|
| AI system scope | One system | Agreed portfolio | Systems and findings defined by the remediation scope | Agreed existing baseline portfolio |
| Risk and regulatory screening | Included for one system | Included per scoped system | Updated where remediation changes the position | Refreshed for the agreed baseline |
| Adaptive assessment | Included | Included per scoped system | Targeted reassessment | Scheduled reassessment within baseline scope |
| Evidence review | Agreed evidence set | Scoped portfolio evidence | Closure and reassessment evidence | Agreed evidence refresh and staleness review |
| Reviewer decisions | Included | Included | Included for closure and reassessment | Included for changed and refreshed positions |
| AI system register | Single-system record | Portfolio register | Updated where relevant | Maintained for agreed baseline |
| Gap and action plan | Included | Consolidated plan | Actively governed remediation programme | Tracks agreed existing actions |
| Templates | Required templates identified; one only if scoped | Recommended and prioritised | Agreed templates tailored and reviewed | Updated only where an agreed baseline change requires it |
| Remediation delivery | Recommendations only | Roadmap only | Core service | Existing-action tracking and evidence review only |
| Closure-evidence review | Not included unless expressly scoped | Limited where agreed | Core service | Included for agreed existing actions |
| Audience reports | One agreed report | Agreed report set | Relevant reports updated | Agreed reports refreshed on cadence |
| Regulatory-change monitoring | Current assessment context only | Current engagement context only | Relevant changes during the engagement | Included for agreed authoritative sources |
| New-system onboarding | No | Systems included in original scope | Only where expressly included | Not included in the baseline annual price; separately scoped |
| Material drift or major change | No | Only within original assessment scope | Only if included in remediation scope | Separately scoped where material |
| Legal advice or certification | Not included | Not included | Not included | Not included |
No engagement automatically includes every R00–R08 report or all twelve templates. Reports and templates are allocated to the engagement in the written proposal.
Common questions about scope and price
Can we begin with one AI system?
Yes. The Focused Assessment is designed as a contained starting point before deciding whether to extend assurance across a wider portfolio.
Is pricing charged separately for every framework?
No. Applicable frameworks are mapped through the same governed assessment and evidence base. Pricing reflects the systems, evidence, remediation and review work required.
Are the published one-time prices fixed quotations?
No. They are indicative ranges. A written scope and fixed proposal are provided after the systems, evidence position and required outputs are understood.
What is required before Continuous Assurance begins?
An initial assessment must establish the agreed system, control, evidence, findings and reporting baseline. The initial assessment is separately scoped and priced.
What does the £25,000 annual service cover?
It maintains the agreed baseline portfolio through scheduled reassessment, evidence refresh, existing-action review, relevant regulatory-change assessment and refreshed agreed outputs.
Are new AI systems included in the annual price?
No. Material new systems and significant changes are separately scoped and agreed.
What happens when an existing AI system changes?
Minor changes within the agreed baseline may be handled through Continuous Assurance. Significant changes in purpose, autonomy, supplier, model, jurisdiction or impact require a separate scope and commercial agreement.
Does Eshalu implement technical changes?
Not by default. Eshalu assesses controls, supports governance design and reviews evidence. Software engineering and technical implementation require separate arrangements.
Does the price include legal advice or certification?
No. Eshalu reports evidence, readiness and gaps. It does not provide legal advice or certify compliance.