Aegis AI Governance

Aegis AI Governance is a boutique consultancy that takes software companies from a blank page to a certification-ready AI management system. Most of its work starts with a procurement trigger: an enterprise customer's security questionnaire asks for ISO/IEC 42001, and the vendor needs a credible plan within a quarter. The team scopes the AIMS around the products actually in scope, reuses the client's existing ISO 27001 controls wherever the two standards overlap, and drafts the AI impact assessments, policy set and lifecycle procedures the standard requires. Engagements are fixed-scope and typically run twelve to twenty weeks, ending with an internal audit and a management review the client can hand to its certification body. Aegis also runs half-day executive briefings for boards that need to understand what they are being asked to sign off. The firm works remotely from Amsterdam with practitioners in Germany and the UK, and publishes its pricing bands rather than quoting per engagement. It does not perform certification audits and refers clients to accredited certification bodies for the formal stage 1 and stage 2 assessments.