TÜV-certified AI auditor · EU AI Act · ISO/IEC 42001

With the AI readiness check you know exactly which AI runs in your company, audit-proof and documented.

The EU AI Act* applies, the GDPR anyway. But do you know which AI is really running in your company — including in the shadows? We take inventory and deliver a readiness score, a risk traffic-light and a prioritized roadmap — and guide you to certification readiness when you need it.

30 min · no pitch · no obligation

* EU AI Act — enforcement from 2 August 2026

In force since February 2025. From 2 August 2026, national market-surveillance enforcement kicks in across the member states — not paused.

0%

of companies already use AI

Bitkom 2026

0%

have no binding rules for using AI

Bitkom 2025

0%

suspect uncontrolled shadow AI in their own teams

Bitkom 2025

Compliance as an edge, not a brake.

Knowing early where you stand means passing audits, tenders and investor due diligence with confidence — and turning the obligation into a selling point.

What stands between you and audit-ready AI compliance.

At the next audit, tender or investor review, only one thing counts: do you have your AI under control — and can you prove it? That's the certainty we give you.

01

The EU AI Act is law. Do you know which AI is really running in your company?

Which AI do you actually use? Who introduced it? Who documents it? Who reviews the risks? When these questions are unclear, it isn't just the audit that's a risk — it's every customer contract that demands AI conformity, and every investor due diligence that asks about it.

0%

of employees use AI without their employer's knowledge

Bitkom 2025

0%

need help implementing the EU AI Act

Bitkom 2024

No AI inventory

Which systems even count as AI under the EU AI Act? Who introduced them, who is responsible, where does data flow? Without a clean overview, no serious compliance effort can start.

  • Nobody has the full picture of which AI runs in the company
  • Tools, APIs and shadow accounts are recorded nowhere
  • Without an inventory, every compliance initiative lacks a foundation

Governance by improvisation

Decisions about AI use are made ad hoc. No clear roles, no documented reviews, no escalation paths. Compliance depends on the goodwill of individuals.

  • Decisions about AI are made ad hoc, without a defined process
  • No clear roles, reviews or escalation paths
  • When it matters, you can't prove who checked what

Customer demands you can't answer

More and more tenders ask for AIMS or AI proof. Investors review AI governance in due diligence. Whoever can't deliver here is out.

  • Tenders increasingly require AIMS / AI proof
  • Investors review AI governance in due diligence
  • Without proof, you drop out of the running

Pragmatic, not bureaucratic

Lean documentation, clear roles, automatable processes — audit-ready, but built for everyday work.

Tangible results

Readiness score, risk traffic-light and a prioritized roadmap — not a binder for the shelf.

TÜV-grade & build-aware

Reviewed by a TÜV-certified AI auditor — and we help build the tools you use to run compliance productively.

Risk classification under the EU AI Act

Every AI system in use is cleanly classified: minimal risk, limited risk, high risk, unacceptable. Documentation that holds up in an audit, not driven by buzzwords.

  • Every system classified: minimal, limited, high, unacceptable
  • Audit-proof documentation instead of buzzwords
  • A clear view of where real obligations apply

Lean governance

Clear roles (AI officers, reviewers, escalation paths), minimal documentation duties, automatable processes. No bureaucracy monster.

  • Clear roles: AI officers, reviewers, escalation
  • Minimal documentation duties, automatable
  • Protects without slowing down everyday work

Certification readiness (ISO/IEC 42001)

Guidance from inventory to certification readiness — aligned with ISO/IEC 42001. Certification is issued by the accredited body; we prepare you so it succeeds on the first attempt.

  • Preparation & guidance toward accredited certification
  • Evidence and document list, risk matrix
  • Ready for the official audit at TÜV or DEKRA

02

Compliance that doesn't slow you down.

We start with an honest inventory: which AI runs in your company — including shadow AI —, what is legally mandatory, where does untapped potential lie? On that we build EU AI Act classification and lean governance. Certification readiness aligned with ISO/IEC 42001 is the later step for everyone who needs it for tenders, investors or regulators — pragmatic, without bureaucratic overhead.

ISO/IEC 42001 — certification-ready

Make your AI audit-proof with audits that protect instead of slowing you down.

Find out which audit stage fits you, and turn regulatory pressure into a solid head start.

The fast status check: where do you really stand?

An honest, fast status check: which AI is running, where the risks sit and what the quickest levers are — with a score, a risk traffic-light and a clear recommendation.

AI usage overview

We capture which AI tools and features you use — including shadow AI.

Risk traffic-light

Every area gets a green/amber/red rating — you instantly see where it burns.

AI readiness score

A transparent maturity score that shows your standing at a glance.

Quick wins

The fast, doable measures that immediately cut risk or raise value.

30/60/90 recommendation

A first priority list for the next three months.

AI readiness score

Your maturity score with rationale — the starting point for everything else.

Scoreat a glance

Risk traffic-light

Green/amber/red across all reviewed areas — instantly understandable.

Traffic-lightprioritized

AI usage overview

A list of your AI in use, incl. uncovered shadow AI.

incl. shadow AI

30/60/90 recommendation

The first priorities for the next three months.

Quick winsRoadmap

From a quick readiness check to a full AIMS audit — choose the right depth.

Creditable

Readiness Check

from 1,900 €

Leadership, division heads, IT/data protection

The fast status check: where do you stand, what's mandatory, what brings the most?

  • AI readiness score & risk traffic-light
  • Overview of your AI use (incl. shadow AI)
  • Quick wins + 30/60/90 recommendation

Reviewed by a TÜV-certified AI auditor

Creditable

Compliance Audit

from 3,900 €

Leadership, data protection, compliance, IT, departments

The deep review: gaps, risk classes and a concrete action catalogue.

  • Compliance gap matrix & risk classification
  • AI system & tool register
  • Action catalogue + management summary

Reviewed by a TÜV-certified AI auditor

Governance Audit

from 5,500 €

Leadership, AI owners, DP, IT, HR, departments

The integration: roles, approvals and a governance model that holds up day to day.

  • Governance maturity & roles/responsibility matrix
  • Policy gap + control/approval processes
  • 90-day governance roadmap

Reviewed by a TÜV-certified AI auditor

AIMS Audit (ISO/IEC 42001)

On request

Leadership, AI/quality mgmt, IT, compliance, DP

Certification readiness: aligned with ISO/IEC 42001 — we review, prepare and accompany; certification is issued by the accredited body.

  • AIMS gap analysis & audit plan/checklist
  • Evidence/document list + risk matrix
  • Action plan + management readout

Reviewed by a TÜV-certified AI auditor

Follow-up Audit

from 1,200 €Same as the initial audit · ideally 6–12 weeks later

The ongoing re-check: what's been implemented, what's new — and what comes next?

  • Progress assessment & updated gap matrix
  • Status of measures + new prioritization
  • Roadmap update

twentyfourseven guarantee

Every audit delivers concrete findings, a clear score and a prioritized roadmap — tangible, not for the filing cabinet. If the value isn't there, we make it right. And the Readiness Check and Compliance Audit are fully creditable toward a follow-on audit.

Your auditor

Reviewed by a TÜV-certified AI auditor.

David Gianluca Krause is a TÜV Rheinland–certified AI manager, AI officer and AI auditor. He reviews you thoroughly, prepares you for accredited certification and accompanies you to the official audit — certification is issued by the accredited body (TÜV, DEKRA).

  • TÜV Rheinland
  • DEKRA
  • ISO/IEC 42001

How we work together.

From the first analysis to handover, in four clear steps, transparent and risk-free.

01

Pre-assessment questionnaire

You fill out a compact questionnaire; we review the first tools, roles and documents.

02

Quick review

We get a fast overview of your AI use — including shadow AI.

03

Score & risk traffic-light

We assess your maturity and rate every area green/amber/red.

04

Readout & quick wins

You get a score, a traffic-light and a 30/60/90 recommendation in a compact readout.

FAQ

Frequently asked questions about AI Readiness Check & Audits.

No. Accredited certification is issued by a notified body such as TÜV or DEKRA. We review you, prepare you and accompany the audit process — so the certification succeeds on the first attempt.
An AI management system (AIMS) under ISO/IEC 42001 is the first internationally certifiable standard for AI governance (published December 2023). It is increasingly expected in tenders and by investors and partners — comparable to ISO 27001 for information security.
The readiness check quickly shows where you stand (score, risk traffic-light, quick wins). Compliance and governance audits go deeper. Formal certification is the later step for everyone who needs it for tenders or investors. We recommend pragmatically, based on need — nothing on spec.
Yes. The Readiness Check and Compliance Audit are fully creditable toward a follow-on audit — your investment keeps working instead of going to waste.
The readiness check delivers first results very quickly; deeper audits take a little more time. We set the exact scope after a short pre-assessment questionnaire. The path to full certification is planned over several months — and you get a concrete roadmap for it.
Both. The pre-assessment questionnaire and the review run remotely; interviews and the readout we do on-site or via video — whatever works best for you.

Stop planning.
Start building.

You've got bottlenecks, we've got the systems. Book your free intro call now and find out in 30 minutes:

  • Which AI and automation opportunities offer real leverage in your business — including the ones you haven't spotted yet.

  • Which data and which tools you already have in place — and what of it can power your first use case.

  • An honest first project scope — what could be running in production at your company in 2–3 weeks.

Tailored to your reality — no off-the-shelf setups.

0%

Improved competitive position among AI users

Bitkom 2026

0%

Plan to expand their use of AI

Bitkom 2026

0%

Measurable contribution to business success among AI users

Bitkom 2026

0%

Are increasing their digitalization investments in 2026

Bitkom 2026