Granlund Assurance Studio works with Nordic industrial companies that are embedding machine learning in products, production lines and maintenance systems and now face both ISO/IEC 42001 and the EU AI Act. Its Stockholm office of around twenty consultants includes several with backgrounds in defence and export-controlled engineering, which is why a meaningful share of its clients are suppliers to the Swedish and Finnish defence sectors, where security classification shapes how an AI management system can be documented. A gap analysis is quoted as a fixed project and takes five to seven weeks, including site visits to at least one production facility. Implementation projects follow a phased plan agreed with the client's quality and security functions so that the AIMS reuses existing ISO 9001 and ISO 27001 structures rather than duplicating them. Readiness assessments before a certification audit are run by a consultant who was not involved in the implementation. Granlund does not offer retainers, certification audits or legal advice. Delivery is in Swedish or English, with hybrid working across Sweden, Denmark, Finland and Norway.