Buyers now ask
Enterprise procurement and partners want evidence you manage AI risk — a policy, an AI-Act classification, an ISO 42001 gap position. No answer, no deal.
ISO/IEC 42001 · EU AI ActGet AI-governance ready.
Get AI-governance ready.
Without the consultant invoice.
Score your readiness, classify every AI system, close the gaps and generate the documents your customers and auditors ask for — one calm workspace, not a £15k engagement.
Mapped to ISO/IEC 42001 & the EU AI ActBuilt for SME AI vendorsand the consultants who serve them
Example readinessOn track
68
68 / 100 weighted across six areas
Governance74%
AI inventory & risk61%
Data & transparency70%
Operations & monitoring58%
The problem
AI governance became a sales blocker overnight.
The EU AI Act is in force and ISO/IEC 42001 is the emerging bar. For a small AI vendor, “how do you govern your AI?” now shows up in every serious deal.
Consultants are £10k+
A boutique readiness engagement runs £10–25k and three months. Most SME vendors can’t justify that before the deal is even signed.
Spreadsheets don’t survive audit
A folder of half-finished docs won’t hold up to an auditor or a security questionnaire. You need a system of record, not another tab.
How it works
From zero to audit-ready in three moves.
A guided path, not a blank page. Each step produces evidence you can hand to a customer, a partner, or an auditor.
Score
Take the free scorecard. Get a readiness score across the domains and see exactly where the gaps are — in a few minutes.
Classify & track
Add your AI systems, classify each against the EU AI Act, and work the ISO 42001 gap tracker with owners, status and evidence.
Generate
Produce the core documents — AIMS policy, Statement of Applicability, risk register, system register, impact assessment, roles — as versioned PDF/DOCX.
The workspace
Everything the standard expects, in one place.
AI system inventory
A living register of every AI system, its purpose, owner and lifecycle stage.
EU AI Act classification
A guided wizard maps each system to its risk tier and the obligations that follow.
ISO 42001 gap tracker
Clauses 4–10 and Annex A controls with status, owner, notes and filters.
Evidence vault
Private file storage, linked to controls. Access only via short-lived signed links.
Document generation
Audit-grade documents generated from your data as versioned PDF/DOCX.
Readiness dashboard
One score, per-clause progress, outstanding actions and the deadlines that matter.
Roles
Three roles, and a viewer really cannot change anything.
Your auditor, your adviser and your board can all be given the picture without being given the pen. Every row below is enforced in the database, not just hidden in the interface.
owner
Answers for the compliance record. Decides who is in, what is spent, and what support may see.
editor
Does the work. Registers systems, classifies them, works the tracker, gathers evidence.
viewer
Reads everything, changes nothing. The right role for an auditor, an adviser or a board member.
| Can they… | owner | editor | viewer |
|---|---|---|---|
| Reading the workspace | |||
| See the dashboard and readiness score | Yes | Yes | Yes |
| Read the AI system register and its classifications | Yes | Yes | Yes |
| Read every ISO 42001 control, its status and its notes | Yes | Yes | Yes |
| Download evidence files and generated documents | Yes | Yes | Yes |
| Read the support-access audit trail — what ITSM Ltd opened, and when | Yes | Yes | Yes |
| Doing the work | |||
| Add and edit AI systems | Yes | Yes | No |
| Run and re-run the EU AI Act classification | Yes | Yes | No |
| Set control statuses and write control notes | Yes | Yes | No |
| Upload evidence and link it to a control | Yes | Yes | No |
| Generate documents as PDF and DOCX | Yes | Yes | No |
| Raise support requests and improvement requests | Yes | Yes | No |
| Running the organisation | |||
| Invite people, change their role, remove them | Yes | No | No |
| Edit the organisation profile | Yes | No | No |
| Manage billing and change plan | Yes | No | No |
| Delete AI systems and delete evidence | Yes | No | No |
| Approve, refuse or revoke ITSM Ltd support access | Yes | No | No |
Seats are counted per plan, and a viewer costs the same seat as an owner. ITSM Ltd support is not on this table at all: it has no standing access to your workspace, and reads it only after an owner approves a time-bounded, read-only, fully audited request.
Pricing
Start free. Upgrade when it’s paying you back.
Zero cost to find out where you stand. Real pricing that a small vendor can sign off without a business case.
Free
£0
Everything you need to see where you stand.
- 1 AI system
- Readiness scorecard
- Gap tracker (view)
Pro
£79/mo
The full workspace for a growing vendor. £790/yr.
- Up to 10 AI systems
- All core documents (PDF/DOCX)
- Evidence vault + versioning
- Full gap tracker & dashboard
Consultant
£249/mo
White-label, multi-client. For agencies & MSPs.
- Unlimited client workspaces
- Your logo on every export
- Multi-client roll-up report
Founding membership — £249 once, for life. Locks Pro features forever and shapes the roadmap with us.Limited to the first 20 — claim a seat
Questions
The things buyers ask us first.
Is this legal advice?
No. AIMS-in-a-Box is a management-system and evidence toolkit — it helps you build, track and document your AI governance. It isn’t a law firm and doesn’t replace professional advice where you need it.
How long until we’re ready?
Most vendors reach a defensible baseline in weeks, not months — the scorecard shows the gaps on day one, and the tracker turns them into a short, owned to-do list.
Is our data safe?
Every workspace is isolated at the database level with row-level security, so one organisation can never see another’s data. Evidence files are private and reachable only through short-lived signed links generated after a membership check.
What’s the Founding deal?
£249 once, for life — for the first 20 members. It locks in Pro features permanently and gives you a direct line into what we build next.
Do you support consultants and agencies?
Yes — the Consultant tier adds white-label exports and unlimited client workspaces with a roll-up view. It’s weeks away; register your interest on the pricing page to be first in.
Find out where you stand — free, in five minutes.
Your readiness score, your domain-by-domain breakdown, and a clear list of what to fix first.
Take the free scorecardNo card. No spam. Just your score and the next three things to do.