Sablier Governance Lab

Sablier Governance Lab works with HR software vendors and French public bodies that deploy or procure systems the EU AI Act treats as high-risk: recruitment screening, workforce scheduling, eligibility scoring for benefits. A first engagement is almost always a gap analysis against the Annex III obligations and, where the client wants a management system behind it, ISO/IEC 42001. That phase is fixed-price, takes four to six weeks and ends with a prioritised remediation register rather than a slide deck. Implementation follows as a second fixed-scope project, usually three to five months, covering risk management, data governance records, technical documentation and the post-market monitoring plan. For providers who must pass through a notified body or self-assess under Annex VI, the team prepares the conformity file and rehearses the review with the client's engineers. Consultants are split between the Paris office and client premises; public-sector work is generally done onsite because of data-handling constraints. Sablier is neither a notified body nor an ISO 42001 certifier, and it leaves the engineering to the client's own developers. Retainer terms exist for former project clients but are quoted case by case.