Services / Packages
AI Risk Review
An independent review of one AI tool, vendor, or use case before you adopt it or expand it.
From $1,500 per system1–2 weeks
Public agencies receive quotes structured to fit their procurement rules.
You own everything we produce.
Who this is for
Organizations usually call us about this when:
A team wants to buy an AI product and leadership wants an independent opinion first.
A vendor just turned on AI features in software you already use.
An AI pilot is about to expand to more users or more data.
Overview
Before an AI system goes live or reaches more people, someone should ask what it does, what data it touches, who it affects, and what could go wrong. We review the system and the vendor’s terms, rate the risk, and recommend specific controls and contract protections.
What’s included
- Review of the system’s purpose, users, and decisions it affects
- Review of data inputs, outputs, and retention
- Review of vendor terms, security, and data use rights
- A risk rating with key findings
- Recommended controls and contract terms
- A written report your leadership can act on
Available under attorney-client privilege. We can perform this work at the direction of your counsel, so findings may be protected by privilege. Ask us about privileged engagements.
How it works
Scope
We confirm the system, its intended use, and the questions leadership needs answered.
Review
We examine documentation, configuration, vendor terms, and how people will use it.
Report
You receive a risk rating, findings, and recommended controls.
How it works for your organization
The same service, tailored to the obligations and realities of each sector.
Private Sector
Companies use risk reviews to adopt AI quickly while protecting customers and the business.
- Vendor due diligence for AI products and AI features
- Customer-facing AI such as chatbots and recommendation tools
- Contract terms on data use, model training, and liability
- Readiness for state AI and privacy laws
Public Sector
Agencies use risk reviews to evaluate AI before it affects residents or public services.
- Systems that influence eligibility, enforcement, or services
- Vendor proposals and pilots before contract award
- Bias, accuracy, and human review requirements
- Documentation that supports transparency and oversight
Nonprofits
Nonprofits use risk reviews to adopt AI tools safely when budgets and staff are limited.
- Donated or discounted AI tools and their data terms
- AI used in client intake, case notes, or communications
- Risks to vulnerable populations and confidential records
- Practical controls a small team can maintain
Frequently asked questions
How much does AI Risk Review cost?
AI Risk Review starts at $1,500 per system. The final price depends on scope, and we confirm it in writing before any work begins.
How long does it take?
Most engagements take 1–2 weeks, depending on scope and how quickly information is available.
What do we receive?
The engagement includes: review of the system’s purpose, users, and decisions it affects; review of data inputs, outputs, and retention; review of vendor terms, security, and data use rights; A risk rating with key findings.
Can this be done under attorney-client privilege?
Yes. When your counsel engages us and directs the work for the purpose of giving legal advice, our findings may be protected by privilege. Ask your counsel to contact us and we’ll structure the engagement with them.
What if a deliverable doesn’t meet the agreed scope?
We revise it until it does, at no extra cost. And if we miss an agreed delivery date, we take 10% off that deliverable.
Who owns the deliverables?
You do. Everything we produce for you is yours to keep, use, and share.
Related Guides
- AI Impact Assessment Example for Credit UnionsA worked example assessing an automated personal loan decision model, from purpose and data to risks, controls, and approval.
- AI Risk Register for Credit UnionsA sample register of common credit union AI uses, the data each one touches, its risk tier, the controls it needs, and who owns it.
- AI Tabletop Exercise Scenario for Credit UnionsA ready-to-run scenario where a member service chatbot exposes account details, with timed developments and questions for each phase of the response.
- AI Laws by StateWhere each state’s AI and privacy rules stand, with key dates and a page for every state.
Related services
AI Governance Readiness Assessment
A gap analysis of your AI governance against the NIST AI RMF, with a prioritized plan for what to fix first.
AI Acceptable Use Policy
A clear, written policy that tells your people which AI tools they can use, for what work, and with what data.
ISO/IEC 42001 Gap Assessment
An assessment of your AI management system against ISO/IEC 42001, the international standard for governing AI.
Talk through your AI and privacy questions
Tell us what you're working on, and we'll reply within one business day.