Practitioners below list Canada as a served jurisdiction — either directly, or through EU-wide or global coverage. Compare credentials, price bands, firm size and languages before requesting an intro.
ISO 42001 and NIST AI RMF gap analysis and implementation for Canadian banks, insurers and fintechs.
Montreal law firm advising on EU AI Act, Quebec Law 25 and US state AI rules for hiring and consumer decisions.
Outsourced DPO firm offering fractional AI Officers and EU AI Act readiness work alongside its GDPR practice.
Embedded ISO 42001 implementation and training for Singapore fintechs and mid-sized technology companies.
Remote ISO 42001 and EU AI Act conformity programmes for fintech and medtech companies selling on both sides of the Atlantic.
Fractional AI governance officer and bias auditor for HR technology vendors selling into the US and Europe.
ISO 42001 gap analysis, implementation and training for government entities and banks in the UAE and Saudi Arabia.
NIST AI RMF and ISO 42001 training for federal programme staff, defense contractors and their suppliers, in DC and online.
Live online EU AI Act and ISO 42001 courses in Spanish and English, capped at sixteen seats, from Valencia.
Live online ISO 42001, EU AI Act and NIST AI RMF courses for compliance, engineering and audit teams.
Live online ISO 42001 implementer and auditor courses plus EU AI Act briefings, taught by credentialed trainers.
Paris privacy consultancy extending outsourced-DPO work into EU AI Act maturity assessments, governance design and training.
Global law firm advising AI providers, deployers and employers on EU AI Act, NYC LL144 and privacy compliance, with AI legal red-teaming.
Solo London practice taking SMEs from ISO 42001 gap analysis to a certification-ready AIMS at published fixed prices.
US certification body for ISO 42001 with a dedicated AI practice spanning NIST AI RMF, EU AI Act and AI security assessments.
Common questions
It applies to any provider placing AI systems on the EU market, and to providers and deployers outside the EU whose system output is used in the EU — so Canadian companies selling into the EU are in scope regardless of where they are based. Providers of high-risk systems established outside the EU must also appoint an EU authorised representative.
Of the 5 practitioners serving Canada that disclose a gap-analysis band, the most common is $15k–$50k (60% of those disclosing). A classification exercise for one product is a small engagement; a full high-risk programme is a multi-month project. Of the 5 practitioners serving Canada that disclose a retainer band, the most common is $5k–$15k / month (80% of those disclosing).