ART25 Consulting

ART25 Consulting is a Stockholm-based boutique working at the junction of EU AI Act obligations and ISO/IEC 42001 management systems. A typical engagement starts when an organisation providing or deploying AI systems needs to understand its exposure under the AI Act: the firm runs a gap analysis, produces a response plan, and can stay on for conformity assessment preparation, fundamental rights impact assessments and ISO/IEC 42005-style AI impact assessments. Its ISO 42001 work follows a staged path — an initial assessment, design and build-out of the AI management system, internal audit and readiness checks, then coordination of the certification step with an accredited body; ART25 does not certify anything itself. For companies without in-house capacity it offers a part-time AI officer arrangement and, on the data protection side, an external DPO service alongside GDPR gap analyses, DPIAs and supplier due diligence. It also delivers AI governance and AI literacy training and acts as an EU representative for non-EU providers caught by the AI Act or GDPR. Published engagement summaries describe work for Nordic energy and European critical-infrastructure clients without naming them. Founder Hummam Wasfi leads the practice; pricing is not published.