Skip to main content
Services

The platform, with people behind it.

cosantio is software, but AI Act readiness is not a thing you buy and forget. These are the engagements that get a small or medium firm from exposed to audit-defensible, each one producing artefacts that live in the platform, not in a drawer.

Start with the free Scorecard. Eight questions, three minutes, a regulator-grade PDF of where you stand. From there, the natural next step is usually a Masterclass or an Exposure Audit. Get the Scorecard →
01

AI Act Masterclass

Get your team and board fluent, fast.

A focused, sector-specific session that takes your leadership and key staff from “we should look into this” to a shared, accurate understanding of what the EU AI Act means for your firm. We cover what is already in force, what is coming, and what your obligations actually are, in plain language, grounded in your sector. A practical way to meet part of the Article 4 AI literacy duty that has applied since February 2025.

For: boards, leadership teams, and the person who has just been handed AI Act responsibility.

Format
Live session, in person or remote, tailored to your sector
You leave with
  • A briefed board and team
  • Literacy attendance record
  • A clear next-step plan
Book a call for pricing →
02

Regulatory Exposure Audit

Find out exactly where your risk sits.

A structured review of how your firm uses AI, mapped against the Act and the regimes around it. We identify each AI system in use, flag where you are likely a provider or a deployer, surface any prohibited uses, and tell you which systems are likely high-risk under Annex III. The output is a clear picture of your exposure and a prioritised list of what to deal with first.

For: firms that know AI is in use somewhere but don't yet have a defensible view of their obligations.

Format
Guided audit with your team, over one to two weeks
You leave with
  • AI system inventory
  • Provider vs deployer mapping
  • Prioritised exposure report
Book a call for pricing →
03

AI Literacy Rollout

Meet Article 4, with the evidence to prove it.

A structured AI literacy programme across your firm, with the records to demonstrate it. Article 4 has required adequate AI literacy among staff who deal with AI systems since February 2025, and it is one of the few obligations already fully in force. We deliver role-appropriate training and leave you with a maintained literacy log you can show a regulator.

For: firms that need organisation-wide literacy handled properly, not a one-off slide deck.

Format
Programme rollout, role-based, with ongoing records
You leave with
  • Role-based training delivered
  • AI literacy log
  • Article 4 evidence trail
Book a call for pricing →
04

AI Act Readiness Sprint

From exposed to audit-defensible, in weeks.

The core engagement. A structured sprint that builds your governance foundation: a complete AI inventory, classification of every system against Annex III, AI policies, the governance structure, and the evidence trail behind it. By the end your firm has a defensible posture against every obligation in force, and a clear plan for the high-risk regime that applies from 2 December 2027 under the provisional Digital Omnibus timeline.

For: firms that want the whole foundation built and documented, fast, by people who have done it before.

Format
Multi-week sprint, led by us, built in the platform
You leave with
  • AI inventory & risk register
  • Policies & governance structure
  • Board pack & audit trail
Book a call for pricing →
05

Fundamental Rights Assessment

A complete FRIA for a high-risk system.

For a single high-risk AI system, a full FRIA completed end to end. Article 27 requires certain deployers, including those using AI for creditworthiness and insurance pricing, to assess the impact on people's fundamental rights before deployment. We produce the assessment, cite the evidence, and document the mitigations, so the artefact stands up to a regulator. Often the right starting point when one system is the pressing concern.

For: firms with one clearly high-risk system that needs a defensible FRIA now.

Format
Per system, completed with your input
You leave with
  • Completed FRIA document
  • Cited evidence & mitigations
  • Regulator-ready artefact
Book a call for pricing →
06

Compliance as a Service

A named governance officer, on call.

An ongoing retainer that gives your firm a fractional AI Governance Officer: a named person who knows your file. Monthly governance reviews, a quarterly board pack, continuous monitoring in the platform, and someone on the line when a regulator, a carrier, or an auditor writes back. Readiness is not a one-off project; this keeps your posture current as systems change and the regime evolves.

For: firms that want governance handled continuously, without hiring a full-time officer.

Format
Ongoing monthly retainer, named officer
You leave with
  • A named governance officer
  • Quarterly board packs
  • Continuous monitoring
Book a call for pricing →
Grant support

You may not pay full price for this.

Irish SMEs have real public support for exactly this kind of work: skills, governance, and digital capability. Many cosantio engagements are eligible, and support can cover a meaningful share of the cost.

We will help you find and apply for the right support as part of scoping an engagement. We are not a grant authority and cannot guarantee an award, but we know the landscape and will point you to the right door.

Enterprise Ireland

Supports for client companies investing in capability, innovation, and key skills.

Skillnet Ireland

Subsidised, industry-led training, a strong fit for literacy and Masterclass work.

Local Enterprise Offices

Supports for smaller firms, including training and business-improvement programmes.

Grant schemes, eligibility, and funding rates are set by the relevant bodies and change over time. Always confirm current terms with the awarding body. We will share what we know and help you navigate it.

Not sure where to start?

The Scorecard points you to the right service.

Eight questions, three minutes, a regulator-grade PDF. It tells you where you stand and which of these engagements fits, before you ever book a call.

Get the Scorecard →Or book a 20-minute call