Spreewerk Governance

Spreewerk Governance builds AI management systems for software companies whose products score, rank or screen individuals, with a particular concentration in recruiting, workforce analytics and other HR tooling. The firm's core offer is a combined ISO/IEC 42001 and EU AI Act programme: a four-week gap analysis that maps the client's systems against both the standard and the Act's high-risk obligations, followed by an implementation phase that writes the policy set, the risk and impact assessments, and the technical documentation Annex IV expects. Clients that already hold ISO 27001 keep their existing control owners and evidence repository, which shortens the work considerably. Fixed-price projects run twelve to twenty-four weeks; shorter reviews and interim support are billed by the day, and gap analyses for a single product usually fall between fifteen and fifty thousand dollars. The team of around twenty sits in Berlin-Kreuzberg and works partly on site at clients across Germany, Austria and Switzerland. Spreewerk does not act as a notified body or certification body, does not conduct third-party conformity assessments, and will say so early when a client actually needs one of those rather than a consultant.